EUVD-2012-5220

Malware in sbrugna...

EUVD-2012-5221

Malware in sbrugna...

EUVD-2012-5222

Malware in sbrugna...

EUVD-2012-5219

Malware in sbrugna...

CVE-2012-5297

SQL injection vulnerability in edit.asp in Mavili Guestbook, as released in November 2007, allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2012-5296

Multiple cross-site scripting XSS vulnerabilities in Mavili Guestbook, as released in November 2007, allow remote attackers to inject arbitrary web script or HTML via the id parameter to 1 approve.asp, 2 delete.asp, 3 edit.asp, or 4 edit2.asp...

CVE-2012-5298

Mavili Guestbook, as released in November 2007, stores guestbook.mdb under the web root with insufficient access control, which allows remote attackers to read the database via a direct request...

CVE-2012-5299

Mavili Guestbook, as released in November 2007, allows remote attackers to edit, delete, and approve arbitrary messages via a direct request to 1 edit.asp, 2 delete.asp, or 3 approve.asp...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Mavili Guestbook, as released in November 2007, allow remote attackers to inject arbitrary web script or HTML via the id parameter to 1 approve.asp, 2 delete.asp, 3 edit.asp, or 4 edit2.asp...

Improper access control

Mavili Guestbook, as released in November 2007, stores guestbook.mdb under the web root with insufficient access control, which allows remote attackers to read the database via a direct request...

Design/Logic Flaw

Mavili Guestbook, as released in November 2007, allows remote attackers to edit, delete, and approve arbitrary messages via a direct request to 1 edit.asp, 2 delete.asp, or 3 approve.asp...

Sql injection

SQL injection vulnerability in edit.asp in Mavili Guestbook, as released in November 2007, allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2012-5296

CVE-2012-5296 corresponds to multiple cross-site scripting (XSS) vulnerabilities in the Mavili Guestbook application, reported as released in November 2007. The vulnerability is triggered via the id parameter to four scripts (approve.asp, delete.asp, edit.asp, edit2.asp), enabling remote injectio...

CVE-2012-5299

Mavili Guestbook, as released in November 2007, allows remote attackers to edit, delete, and approve arbitrary messages via a direct request to 1 edit.asp, 2 delete.asp, or 3 approve.asp...

CVE-2012-5299

The CVE-2012-5299 entry concerns Mavili Guestbook (released Nov 2007). The vulnerability allows remote attackers to edit, delete, and approve arbitrary messages by sending direct requests to the endpoints edit.asp, delete.asp, or approve.asp. The provided documents do not specify affected version...

CVE-2012-5297

CVE-2012-5297 is a SQL injection vulnerability in the edit.asp page of Mavili Guestbook, exploitable via the id parameter. The issue allows remote attackers to execute arbitrary SQL commands. The description states the flaw existed since November 2007. No specific affected versions, fixes, or rem...

CVE-2012-5298

Mavili Guestbook, as released in November 2007, stores guestbook.mdb under the web root with insufficient access control, which allows remote attackers to read the database via a direct request...

CVE-2012-5298

CVE-2012-5298 concerns Mavili Guestbook (released November 2007). The vulnerability arises because guestbook.mdb is stored under the web root with insufficient access control, allowing remote attackers to read the database by direct request. The impact is exposure of guestbook data; exploitation ...

CVE-2012-5296

Multiple cross-site scripting XSS vulnerabilities in Mavili Guestbook, as released in November 2007, allow remote attackers to inject arbitrary web script or HTML via the id parameter to 1 approve.asp, 2 delete.asp, 3 edit.asp, or 4 edit2.asp...

CVE-2012-5297

SQL injection vulnerability in edit.asp in Mavili Guestbook, as released in November 2007, allows remote attackers to execute arbitrary SQL commands via the id parameter...