PT-2025-51300

Name of the Vulnerable Software and Affected Versions JLex GuestBook version 1.6.4 Description The software contains a reflected cross-site scripting issue in the q URL parameter. This allows attackers to inject malicious scripts. Attackers can create malicious links with XSS payloads to...

WSN Guest 1.21 - id SQL Injection

WSN Guest 1.21 - id SQL Injection WSN Guest 1.21 Version Comments.PHP "ID" SQL Injection Exploit WSN Guest 1.21 Version Comments.PHP "ID" SQL Injection Exploit SQL Injection Code Search Board ALL UniquE-KeyUniquE-Cracker [email protected] f...

PT-2006-6481 · Unknown · Advanced Guestbook

Name of the Vulnerable Software and Affected Versions: Advanced Guestbook version 2.3.1 Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the include path parameter in the admin.php file. Recommendations: For Advanced Guestbook version 2.3.1, consider...

Techno Dreams Guestbook 1.0 - 'key' SQL Injection

Title : Techno Dreams Guestbook v1.0 guestbookview.asp Remote SQL Injection Vulnerability Author : ajann Script Page: http://www.t-dreams.com http://target/path/guestbookview.asp?key= SQL Example: //guestbookview.asp?key=7782%20union%20select%200,0,adminname,password,0,0,0%20from%20admin...

New Vulnerability

I would like to submit a vulnerability that I just recently discovered. I have already contacted the vendor of the software that I discovered the bug in, but they have not gotten back to me. There are two Code Injection/CSS vulnerabilities that exist in Guestbook Version 1.51 by Chi Kien Uong...

Admin access in GuestBook r4

Product: GuestBook Version: release 4 OffSite: http://www.lasource.r2.ru/ Problem: Admin access -------------------------------------- You may use admin panel. Get the password there: http://target/cgi-bin/guestbook/passwd The password don't crypt : Contacts: www.overg.com www.dwcgr0up.com...

Advanced Guestbook

Product : Advanced Guestbook Version : 2.3.1 WebSite : http://www.proxy2.de Problem : phpinfo Description: ------------ phpinfo.php =========== ?php phpinfo; ? =========== Exploit: -------- http://somehost/book/phpinfo.php...