PT-2011-1819

Name of the Vulnerable Software and Affected Versions Gaestebuch version 1.2 Description The issue allows remote attackers to execute arbitrary PHP code via a URL in the script pfad parameter in the guestbook/gbook.php file. Recommendations For Gaestebuch version 1.2, avoid using the script pfad...

CVE-2010-4884: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in guestbook/gbook.php in Gaestebuch 1.2 allows remote attackers to execute arbitrary PHP code via a URL in the scriptpfad parameter...

CVE-2003-1546

CVE-2003-1546 documents a Cross-site scripting (XSS) vulnerability in gbook.php of the Filebased guestbook 1.1.3. The flaw lets remote attackers inject arbitrary web script or HTML through the guestbook comment section. The connected sources reiterate the same description and do not provide addit...

CVE-2003-1546: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in gbook.php in Filebased guestbook 1.1.3 allows remote attackers to inject arbitrary web script or HTML via the comment section...

[eVuln] Doika guestbook 'page' XSS Vulnerability

New eVuln Advisory: Doika guestbook 'page' XSS Vulnerability http://evuln.com/vulns/134/summary.html --------------------Summary---------------- eVuln ID: EV0134 CVE: CVE-2006-4325 Software: Doika guestbook Sowtware's Web Site: http://doika.net/ Versions: 2.5 Critical Level: Harmless Type:...

EV0134.txt

New eVuln Advisory: Doika guestbook 'page' XSS Vulnerability http://evuln.com/vulns/134/summary.html --------------------Summary---------------- eVuln ID: EV0134 CVE: CVE-2006-4325 Software: Doika guestbook Sowtware's Web Site: http://doika.net/ Versions: 2.5 Critical Level: Harmless Type:...

CVE-2006-4325

Cross-site scripting XSS vulnerability in gbook.php in Doika guestbook 2.5, and possibly earlier, allows remote attackers to inject arbitrary web script or HTML via the page parameter...

CVE-2006-4325

The CVE refers to Doika guestbook (version 2.5, possibly earlier) with a reflected XSS in gbook.php via the page parameter. This allows remote attackers to inject arbitrary scripts/HTML. No patch/remediation details are provided in the supplied documents; exploitation status and exact fixes are n...

CVE-2006-4325

Cross-site scripting XSS vulnerability in gbook.php in Doika guestbook 2.5, and possibly earlier, allows remote attackers to inject arbitrary web script or HTML via the page parameter...

CVE-2006-4325: Undefined Security Weakness

Cross-site scripting XSS vulnerability in gbook.php in Doika guestbook 2.5, and possibly earlier, allows remote attackers to inject arbitrary web script or HTML via the page parameter...