PT-2012-5895

Name of the Vulnerable Software and Affected Versions Mavili Guestbook affected versions not specified Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via the id parameter to...

CVE-2012-5296: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Mavili Guestbook, as released in November 2007, allow remote attackers to inject arbitrary web script or HTML via the id parameter to 1 approve.asp, 2 delete.asp, 3 edit.asp, or 4 edit2.asp...

PT-2012-5898

Name of the Vulnerable Software and Affected Versions Mavili Guestbook version released in November 2007 Description The issue allows remote attackers to edit, delete, and approve arbitrary messages. This can be achieved by making a direct request to API endpoints such as "edit.asp", "delete.asp"...