WX Guestbook 1.1.208 - SQL Injection Persistent Cross-Site Scripting

WX Guestbook 1.1.208 - SQL Injection Persistent Cross-Site Scripting WX Guest Book 1.1.208 Vulns By learn3r hacker from nepal [email protected] Product name: WX Guestbook 1.1.208 Product vendor: www.webilix.com This product suffers from multiple SQLi and persistent XSS vuln. SQL Search Vu...

PHPReactor 1.2.7 - Style Attribute HTML Injection

source: https://www.securityfocus.com/bid/5569/info phpReactor does not sufficiently sanitize HTML from various fields such as in the body of a message or in profile fields. It is possible to inject arbitrary HTML and script code into these fields. An attacker may potentially exploit this situati...