PT-2007-2719 · Sava · Sava'S Guestbook

Name of the Vulnerable Software and Affected Versions: Sava's Guestbook version 23.11.2006 Description: The issue allows remote attackers to execute arbitrary SQL commands when magic quotes gpc is disabled. This is achieved by exploiting SQL injection vulnerabilities in the add2.php file via the...

CVE-2007-1304: Undefined Security Weakness

Multiple SQL injection vulnerabilities in add2.php in Sava's Guestbook 23.11.2006, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 name, 2 country, 3 email, 4 website, and 5 message parameters...

PT-2007-2720 · Sava · Sava'S Guestbook

Name of the Vulnerable Software and Affected Versions: Sava's Guestbook version 23.11.2006 Description: The issue allows remote attackers to inject arbitrary web script or HTML via the name, country, email, and website parameters in the add2.php file. This can lead to cross-site scripting XSS...

CVE-2007-1305: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in add2.php in Sava's Guestbook 23.11.2006 allow remote attackers to inject arbitrary web script or HTML via the 1 name, 2 country, 3 email, and 4 website parameters...

CVE-2007-1305

Multiple cross-site scripting XSS vulnerabilities in add2.php in Sava's Guestbook 23.11.2006 allow remote attackers to inject arbitrary web script or HTML via the 1 name, 2 country, 3 email, and 4 website parameters...