Unfixed Script Insertion vulnerability at gav.sourceforge.net

Security researcher st@rext, has submitted on 07/10/2007 a Script Insertion vulnerability affecting gav.sourceforge.net, which at the time of submission ranked 132 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/10/2007. It is currently...

CVE-2007-2859: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in SimpGB 1.46.0 allow remote attackers to execute arbitrary PHP code via a URL in the pathsimpgb parameter to 1 guestbook.php, 2 search.php, 3 mailer.php, 4 avatars.php, 5 ccode.php, 6 comments.php, 7 emoticons.php, 8 gbdownload.php, and possibl...

CVE-2007-1479: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Guestbook.php in Creative Guestbook 1.0 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter...

CVE-2007-1302: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in guestbook.php in LI-Guestbook 1.1, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the country parameter. NOTE: it was later reported that 1.2 is also affected...

LI-Guestbook SQL Injection Vulnerability

New Advisory: LI-Guestbook SQL Injection Vulnerability http://belsec.com/advisories/139/summary.html --------------------Summary---------------- Belsec ID: BS0001 Vendor: LI-Scripts Vendor's Web Site: http://www.liscripts.net Software: LI-Guestbook Sowtware's Web Site:...

CVE-2007-1165: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in DBGuestbook 1.1 allow remote attackers to execute arbitrary PHP code via a URL in the dbsbasepath parameter to 1 utils.php, 2 guestbook.php, or 3 views.php in includes/...

CVE-2006-7076

CVE-2006-7076 affects Advanced Guestbook 2.4 for phpBB, with a cross-site scripting flaw in guestbook.php that lets remote attackers inject arbitrary script or HTML via the entry parameter. The issue is identified as XSS and notes indicate it might originate from SQL injection. Documented impact ...

CVE-2006-7077

SQL injection vulnerability in guestbook.php in Advanced Guestbook 2.4 for phpBB allows remote attackers to execute arbitrary SQl commands via the entry parameter...

CVE-2006-7076: Undefined Security Weakness

Cross-site scripting XSS vulnerability in guestbook.php in Advanced Guestbook 2.4 for phpBB allows remote attackers to inject arbitrary web script or HTML via the entry parameter. NOTE: this issue might be resultant from SQL injection...

CVE-2006-7077: Undefined Security Weakness

SQL injection vulnerability in guestbook.php in Advanced Guestbook 2.4 for phpBB allows remote attackers to execute arbitrary SQl commands via the entry parameter...

DBGuestbook 1.1 (dbs_base_path) Remote File Include Vulnerabilities

Exploit for unknown platform in category web applications =================================================================== DBGuestbook 1.1 dbsbasepath Remote File Include Vulnerabilities =================================================================== DBGuestBook 1.1 Found by Denven ERROR:...

CVE-2007-0926

The CVE-2007-0926 issue affects KvGuestbook 1.0 Beta, specifically the dologin function in guestbook.php. The vulnerability allows remote attackers to gain administrative privileges, probably by manipulating the $mysql['pass'] and $gbpass variables. The available sources confirm the affected comp...

CVE-2007-0926: Undefined Security Weakness

The dologin function in guestbook.php in KvGuestbook 1.0 Beta allows remote attackers to gain administrative privileges, probably via modified $mysql'pass' and $gbpass variables...

Pie Cart Pro - Inc_Dir Remote File Inclusion

Pie Cart Pro - IncDir Remote File Inclusion ==================================================================== Pie Cart Pro = IncDir Remote File Inclusion Exploit ==================================================================== Critical Level : Dangerous By SnIpErSA...

CVE-2006-4122: Undefined Security Weakness

Simple one-file guestbook 1.0 and earlier allows remote attackers to bypass authentication and delete guestbook entries via a modified id parameter to guestbook.php...

CVE-2006-3900

The CVE-2006-3900 entry describes a Cross-site Scripting (XSS) vulnerability in TP-Book, affecting guestbook.php in version 1.00 and earlier. The issue arises via the name parameter, allowing remote attackers to inject arbitrary web script or HTML. The NVD CVSS vector (AV:N/AC:M/Au:N/C:P/I:P/A:P)...

CVE-2006-3900: Undefined Security Weakness

Cross-site scripting XSS vulnerability in guestbook.php in TP-Book 1.00 and earlier allows remote attackers to inject arbitrary web script or HTML via the name parameter...

CVE-2006-3568: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in guestbook.php in Fantastic Guestbook 2.0.1, and possibly earlier versions, allow remote attackers to inject arbitrary web script or HTML via the 1 firstname, 2 lastname, or 3 nickname parameters...

CVE-2006-3526: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in guestbook.php in Sport-slo Advanced Guestbook 1.0 allow remote attackers to inject arbitrary web script or HTML via 1 name and 2 form parameters...

CVE-2006-3063

The CVE-2006-3063 entry describes multiple cross-site scripting (XSS) vulnerabilities in myPHP Guestbook 1.x through 2.0.0-r1 and prior to 2.0.1 RC5. The flaw allows remote attackers to inject arbitrary script or HTML via user-supplied content in specific parameters across multiple pages: (a) ind...