11 matches found
EUVD-2003-1172
Malware in sbrugna...
MPM Guestbook 1.2 Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8958/info MPM Guestbook is reported to be prone to a cross-site scripting vulnerability. This is due to insufficient sanitization of HTML from URI parameters, which will be displayed in web pages that are dynamically...
CVE-2003-1182
CVE-2003-1182 describes an XSS vulnerability in MPM Guestbook 1.2 where an attacker can inject arbitrary script via the lng parameter. Affected product: MPM Guestbook 1.2. CVSS base score 6.8 (MEDIUM) with network attack vector, medium complexity, no authentication required, and partial impact on...
CVE-2003-1182
Cross-site scripting XSS vulnerability in MPM Guestbook 1.2 allows remote attackers to inject arbitrary web script or HTML via the lng parameter...
ss11012005.txt
/ / / \ / / / / / \ \ \ \ / / / / / \ / / // / / / / / / / / / // // / / / // / / / / // , / // / /// // //// // ,/ // / // \ / / / // / / // / /// , / // Ref: SS11012005 SYSTEMSECURE.ORG - Advisory/Exploit PUBLIC ADVISORY Software: MPM Guestbook Pro 1.05 maybe all versions Link:...
[SA13849] MPM Guestbook Pro "header" File Inclusion Vulnerability
TITLE: MPM Guestbook Pro "header" File Inclusion Vulnerability SECUNIA ADVISORY ID: SA13849 VERIFY ADVISORY: http://secunia.com/advisories/13849/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: MPM Guestbook Pro 1.x http://secunia.com/product/4516/ DESCRIPTION: SmOk3...
MPM Guestbook Pro top.php Traversal Arbitrary File Access
The remote host is running MPM Guestbook, a guestbook application written in PHP. There is a flaw in this version which allows an attacker to read arbitrary files on the remote host or to execute arbitrary PHP commands on the remote host by including files hosted on a third-party server...
CVE-2003-1182
Cross-site scripting XSS vulnerability in MPM Guestbook 1.2 allows remote attackers to inject arbitrary web script or HTML via the lng parameter...
MPM Guestbook 1.2 - Cross-Site Scripting
MPM Guestbook 1.2 - Cross-Site Scripting source: https://www.securityfocus.com/bid/8958/info MPM Guestbook is reported to be prone to a cross-site scripting vulnerability. This is due to insufficient sanitization of HTML from URI parameters, which will be displayed in web pages that are dynamical...
[UNIX] MPM Guestbook Multiple Vulnerabilities (CSS, Path Disclosure)
The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...
MPM Guestbook 1.2 - Cross-Site Scripting
source: https://www.securityfocus.com/bid/8958/info MPM Guestbook is reported to be prone to a cross-site scripting vulnerability. This is due to insufficient sanitization of HTML from URI parameters, which will be displayed in web pages that are dynamically generated by the software. An attacker...