EUVD-2005-1686

Malware in sbrugna...

Episodex Guestbook Unauthorized Access and HTML Injection Vulnerability

The remote host is running the Episodex Guestbook, a guestbook written in ASP. The remote version of this software contains an input validation flaw leading to the execution on attacker supplied HTML and script code. In addition an unauthenticated remote attacker can directly access administrator...

Episodex Guestbook Unauthorized Access and HTML Injection Vulnerability

The remote version of Episodex Guestbook contains an input validation flaw leading to the execution on attacker supplied HTML and script code. In addition an unauthenticated remote attacker can directly access administrator functions. SPDX-FileCopyrightText: 2005 Josh Zlatin-Amishav Some text...

CVE-2005-1685

Episodex Guestbook is affected by an authentication bypass and unauthorized editing via admin.asp. Multiple sources (NVD/NVD-derived, OpenVAS NASL, Nessus plugin) describe an input-validation flaw in default.asp that enables remote, unauthenticated attackers to access admin functions and inject H...

CVE-2005-1684

The CVE-2005-1684 entry concerns Episodex Guestbook (ASP) where the default.asp input validation flaw enables cross-site scripting via the Name field (and other fields). Multiple connected sources (OpenVAS/Nessus/NVD) confirm: remote, unauthenticated attackers can inject arbitrary HTML/script and...

Episodex Guestbook Multiple Vulnerabilities (Auth Bypass, XSS)

The remote host is running the Episodex Guestbook, a guestbook written in ASP. The version of Episodex installed on the remote host does not validate input to various fields in the 'default.asp' script before using it to generate dynamic HTML. Additionally, an unauthenticated, remote attacker can...

CVE-2005-1684

Cross-site scripting XSS vulnerability in default.asp for episodex guestbook allows remote attackers to inject arbitrary web script or HTML via the Name field and other fields...

CVE-2005-1685

episodex guestbook allows remote attackers to bypass authentication and edit scripts via a direct request to admin.asp...