CVE-2007-4711

Multiple cross-site scripting XSS vulnerabilities in Toms Gaestebuch 1.00 allow remote attackers to inject arbitrary web script or HTML via the 1 homepage, 2 mail, and 3 name parameters in a show action to a form.php; the 4 language and 5 anzeigebreite parameters to b admin/header.php; and the 6...

CVE-2007-4711

Multiple cross-site scripting XSS vulnerabilities in Toms Gaestebuch 1.00 allow remote attackers to inject arbitrary web script or HTML via the 1 homepage, 2 mail, and 3 name parameters in a show action to a form.php; the 4 language and 5 anzeigebreite parameters to b admin/header.php; and the 6...

CVE-2007-4711

CVE-2007-4711 describes multiple cross-site scripting (XSS) vulnerabilities in Toms Gaestebuch 1.00, and related versions, allowing remote attackers to inject arbitrary script/HTML via the following parameters: (1) homepage, (2) mail, and (3) name in the show action to form.php; (4) language and ...

Remote file inclusion

PHP remote file inclusion vulnerability in index.php in Gaestebuch 1.5 allows remote attackers to execute arbitrary PHP code via a URL in the configrootordner parameter...

CVE-2007-4325

PHP remote file inclusion vulnerability in index.php in Gaestebuch 1.5 allows remote attackers to execute arbitrary PHP code via a URL in the configrootordner parameter...

CVE-2007-4325

Gaestebuch 1.5 is affected by a PHP remote file inclusion in index.php triggered by a URL in the config[root_ordner] parameter. The underlying issue is that a user-supplied path is used in a context that allows inclusion of arbitrary PHP code, enabling remote code execution. The vulnerability aff...

CVE-2007-4325

PHP remote file inclusion vulnerability in index.php in Gaestebuch 1.5 allows remote attackers to execute arbitrary PHP code via a URL in the configrootordner parameter...

advisory-php-gaestebuch-en.txt

-------------------------------------------------------- PHP-Gaestebuch v1.63 Script Injection Vulnerability | Discovered by Trew | ICEnetX Team http://icenetx.net | http://trew.icenetx.net [email protected] | -------------------------------------------------------- Date: 04 marzo 2007...

Stadtaus Gaestebuch-Script index.php include_files Parameter Remote File Inclusion

The remote host is running Stadtaus Gaestebuch-Script, a free guestbook written in PHP. The version of Gaestebuch-Script installed on the remote host fails to sanitize input to the 'includefiles' array parameter before using it in a PHP 'include' function in various scripts. Provided PHP's...