NETonE PHPBook 1.4.6 - Guestbook.php Cross-Site Scripting

NETonE PHPBook 1.4.6 - Guestbook.php Cross-Site Scripting source: https://www.securityfocus.com/bid/14390/info NETonE PHPBook is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input to the 'admin' parameter of the 'guestbook.php'...

NETonE PHPBook 1.4.6 - 'Guestbook.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/14390/info NETonE PHPBook is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input to the 'admin' parameter of the 'guestbook.php' script. A successful exploit could allow an attacker to steal...

CVE-2005-1644

The CVE-2005-1644 entry documents a cross-site scripting (XSS) vulnerability in 1Two Livre d’Or 1.0’s guestbook.php. The vulnerability arises from unsanitized input through the parameters livreornom, livreoremail, and livreormessage, which allows remote attackers to inject arbitrary web script or...

CVE-2005-1644

Cross-site scripting XSS vulnerability in guestbook.php for 1Two Livre d'Or 1.0 allows remote attackers to inject arbitrary web script or HTML via the 1 livreornom, 2 livreoremail, or 3 livreormessage parameters...

CVE-2005-1644: Undefined Security Weakness

Cross-site scripting XSS vulnerability in guestbook.php for 1Two Livre d'Or 1.0 allows remote attackers to inject arbitrary web script or HTML via the 1 livreornom, 2 livreoremail, or 3 livreormessage parameters...

CVE-2005-0786

CVE-2005-0786 is a SQL injection vulnerability in SimpGB where the quote parameter of guestbook.php is unsafely used in queries via gb_new.inc. The issue allows unauthenticated remote attackers to manipulate queries, reading or modifying data and potentially executing commands on the web server. ...

CVE-2005-0786

SQL injection vulnerability in gbnew.inc in SimpGB allows remote attackers to execute arbitrary SQL commands via the quote parameter to guestbook.php...

CVE-2005-0786: Undefined Security Weakness

SQL injection vulnerability in gbnew.inc in SimpGB allows remote attackers to execute arbitrary SQL commands via the quote parameter to guestbook.php...

SimpGB guestbook.php quote Parameter SQL Injection

The remote host is running SimpGB, a web-based guestbook application written in PHP. The version of SimpGB installed on the remote host fails to sanitize user input to the 'quote' parameter of the 'guestbook.php' script before using it in SQL queries. An unauthenticated, remote attacker can...

SimpGB 1.0 - 'Guestbook.php' SQL Injection

source: https://www.securityfocus.com/bid/12801/info SimpGB is reportedly affected by an SQL injection vulnerability. This issue is due to the application failing to properly sanitize user-supplied input passed to the 'guestbook.php' script before using it in a SQL query. This vulnerability could...

SimpGB 1.0 - Guestbook.php SQL Injection

SimpGB 1.0 - Guestbook.php SQL Injection source: https://www.securityfocus.com/bid/12801/info SimpGB is reportedly affected by an SQL injection vulnerability. This issue is due to the application failing to properly sanitize user-supplied input passed to the 'guestbook.php' script before using it...