EUVD-2019-5217

Malware in sbrugna...

CVE-2019-13950

index.php?c=admin=index in SyGuestBook A5 Version 1.2 has stored XSS via a reply to a comment...

Cross site scripting

index.php?c=admin&a=index in SyGuestBook A5 Version 1.2 has stored XSS via a reply to a comment...

CVE-2019-13949

SyGuestBook A5 Version 1.2 has no CSRF protection mechanism, as demonstrated by CSRF for an index.php?c=Administrator&a=update admin password change...