EUVD-2006-6354

Malware in sbrugna...

EUVD-2006-6355

Malware in sbrugna...

CVE-2006-6372

Multiple cross-site scripting XSS vulnerabilities in pbguestbook.php in JAB Guest Book 20061205 allow remote attackers to inject arbitrary web script or HTML via the 1 topic or 2 message parameter. NOTE: The provenance of this information is unknown; the details are obtained solely from third par...

CVE-2006-6372

CVE-2006-6372 describes multiple XSS vulnerabilities in pbguestbook.php of JAB Guest Book 20061205, allowing remote attackers to inject arbitrary web script or HTML via the topic or message parameters. Documented CVSS v2 base score 6.8 (AV:N/AC:M/Au:N/C:P/I:P/A:P). No remediation details are prov...

CVE-2006-6371

The CVE-2006-6371 entry documents a Cross-site scripting (XSS) vulnerability in JAB Guest Book’s pbguestbook.php, exploitable via the author parameter. Affected component: pbguestbook.php in the JAB Guest Book. Root cause: lack of proper input sanitization on the author field leading to script/HT...

XSS in JAB Guest Book

Script Name: JAB Guest Book Authors: [email protected] Website: James Barnsley Bug Report: NetJackal njAThackerzDOTir & nima501ATyahooDOTcom Status: Patch not released First i should apologize for my bad english. Intro: JAB Guest Book is a free guest book written in PHP, it works using flat fil...