EUVD-2002-2354

Malware in sbrugna...

CVE-2002-2376

Cross-site scripting XSS vulnerability in E-Guestsign.pl in E-Guest 1.1 allows remote attackers to inject arbitrary SSI directives, web script, and HTML via the 1 full name, 2 email, 3 homepage, and 4 location parameters. NOTE: this issue might overlap CVE-2005-1605...

E-Guest 1.1 Server Side Include Arbitrary Command Execution Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/5129/info E-Guest guest book is a freely available, open source guest book. It is designed for Unix and Linux operating systems. E-Guest does not adequately sanitize user-supplied input in guest book entries. Because of...

CVE-2002-2376

CVE-2002-2376 is an XSS vulnerability in E-Guest_sign.pl for E-Guest 1.1. The issue allows remote attackers to inject arbitrary SSI directives, web script, and HTML through the (1) full name, (2) email, (3) homepage, and (4) location parameters. The description notes possible overlap with CVE-200...

CVE-2002-2376

Cross-site scripting XSS vulnerability in E-Guestsign.pl in E-Guest 1.1 allows remote attackers to inject arbitrary SSI directives, web script, and HTML via the 1 full name, 2 email, 3 homepage, and 4 location parameters. NOTE: this issue might overlap CVE-2005-1605...

SSI & CSS execution in E-Guest (1.1) & ZAP Book (v1.0.3)

DownBload Security Research Lab Advisory ------------------------------------------------------------------------- Advisory name: SSI & CSS execution in E-Guest 1.1 & ZAP Book v1.0.3 Advisory number: 6 Application: E-Guest 1.1 & ZAP Book v1.0.3 CGI scripts --- E-Guest Author: Leung Eric E-mail:...

E-Guest 1.1 - Server Side Include Arbitrary Command Execution

source: https://www.securityfocus.com/bid/5129/info E-Guest guest book is a freely available, open source guest book. It is designed for Unix and Linux operating systems. E-Guest does not adequately sanitize user-supplied input in guest book entries. Because of this, it is possible to pass along...

E-Guest 1.1 - Server Side Include Arbitrary Command Execution

E-Guest 1.1 - Server Side Include Arbitrary Command Execution source: https://www.securityfocus.com/bid/5129/info E-Guest guest book is a freely available, open source guest book. It is designed for Unix and Linux operating systems. E-Guest does not adequately sanitize user-supplied input in gues...