CVE-2014-9522: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in CMS Papoo Light 6.0.0 Rev 4701 allow remote attackers to inject arbitrary web script or HTML via the 1 author field to guestbook.php or 2 username field to account.php...

DouPHP 1.1 /guestbook.php SQL注入漏洞

No description provided by source...

DouPHP 1.1 /guestbook.php SQL注入漏洞

No description provided by source...

SimpGB 1.0 Guestbook.PHP SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/12801/info SimpGB is reportedly affected by an SQL injection vulnerability. This issue is due to the application failing to properly sanitize user-supplied input passed to the 'guestbook.php' script before using it in a S...

NETonE PHPBook 1.4.6 Guestbook.PHP Cross Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/14390/info NETonE PHPBook is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input to the 'admin' parameter of the 'guestbook.php' script. A successful exploi...

CVE-2012-6523: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in w-CMS 2.01 allow remote attackers to inject arbitrary web script or HTML via 1 the p parameter in the getMenus function in codes/wcms.php; or the COMMENT parameter in 2 blog.php, 3 guestbook.php, or 4 forum.php in codes/. NOTE: some of these...

dedecms latest sql injection exploit guestbook. php-vulnerability warning-the black bar safety net

Impact version 5. 7 Vulnerability file edit. inc. php specific code: 0 1 ? php 0 2 if! defined'DEDEINC' exit'Request Error!'; 0 3 0 4 if! empty$COOKIE'GUESTBOOKPOS' $GUESTBOOKPOS =$COOKIE'GUESTBOOKPOS'; 0 5 else $GUESTBOOKPOS = "guestbook.php"; 0 6 0 7 $id = intval$id; 0 8 ifempty$job $job='view'...

Kahf Poems 1.0 - Multiple Vulnerabilities

Title : Kahf Poems V1.0 guestbook.php SQL Injection + Name : Kahf Poems + Affected Version : v1.0 + Software Link : http://www.traidnt.net/vb/traidnt19736/ + Tested on : L:Vista & Windows Xp and Windows 7 + Date : 13/08/2011 + Dork : "intitle:Kahf Poems - v 1.0 beta" &...

SimpGB 1.49.2 - Guestbook.php Multiple Cross-Site Scripting Vulnerabilities

SimpGB 1.49.2 - Guestbook.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/46033/info SimpGB is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to...

CVE-2010-0940

CVE-2010-0940 is a cross-site scripting (XSS) vulnerability in Simple PHP Guestbook 1.0, exploitable via the action parameter in guestbook.php. The affected component is the guestbook submission page; the root cause is reflected/script injection in user-provided input. Expected impact, as stated ...

CVE-2010-0940: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in guestbook.php in Simple PHP Guestbook 1.0 allows remote attackers to inject arbitrary web script or HTML via the action parameter...

CVE-2008-6934: Improper Control of Generation of Code

Static code injection vulnerability in Sanus|artificium aka Sanusart Free simple guestbook PHP script, when downloaded before 20081111, allows remote attackers to inject arbitrary PHP code into messages.txt via the message parameter to act.php, which is executed when guestbook/guestbook.php is...

CVE-2009-2592

SQL injection vulnerability in guestbook.php in PHPJunkYard GBook 1.6 allows remote attackers to execute arbitrary SQL commands via the mesid parameter...

CVE-2009-2592

The CVE-2009-2592 entry affects PHPJunkYard GBook 1.6, where a flaw in guestbook.php enables SQL injection via the mes_id parameter. This allows remote attackers to potentially run arbitrary SQL commands against the application's database. The vulnerability is described in publicly available sour...

CVE-2009-2592: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in guestbook.php in PHPJunkYard GBook 1.6 allows remote attackers to execute arbitrary SQL commands via the mesid parameter...

fspgb-exec.txt

| | | \ \ \ / / / \ / | / | / | | | | | | \ V / / \ | | | | | | | | | Name required: Write - Mahmood In - Web site without http://: Write - http://tryag.cc In - Message: Write - After All This Go http://www.sanusart.com/php/test/guestbook/guestbook.php?tryag=id See Pictures : 1-...

Unfixed XSS vulnerability at vx.org.ua

Security researcher Uber0n, has submitted on 11/08/2008 a cross-site-scripting XSS vulnerability affecting vx.org.ua, which at the time of submission ranked 116081 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 17/06/2009. It is currently...

CVE-2008-2638

Static code injection vulnerability in guestbook.php in 1Book 1.0.1 and earlier allows remote attackers to upload arbitrary PHP code via the message parameter in an HTML webform, which is written to data.php...

CVE-2008-2638: Improper Control of Generation of Code

Static code injection vulnerability in guestbook.php in 1Book 1.0.1 and earlier allows remote attackers to upload arbitrary PHP code via the message parameter in an HTML webform, which is written to data.php...

CVE-2007-5821: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in DM Guestbook 0.4.1 and earlier allow remote attackers to include and execute arbitrary local files via a .. dot dot in 1 the lng parameter to a guestbook.php, b admin/admin.guestbook.php, or c auto/globnew.php; or 2 the lngdefault parameter to...