EUVD-2006-3293

Malware in sbrugna...

CVE-2006-3295

Cross-site scripting XSS vulnerability in header.php in Open Guestbook 0.5 allows remote attackers to inject arbitrary web script or HTML via the title parameter...

CVE-2006-3296

SQL injection vulnerability in view.php in Open Guestbook 0.5 allows remote attackers to execute arbitrary SQL commands via the offset parameter...

CVE-2006-3296

The CVE-2006-3296 entry describes a SQL injection in Open Guestbook 0.5, exploitable via the offset parameter in view.php to allow remote execution of arbitrary SQL commands. Affected software: Open Guestbook 0.5; vulnerable component: view.php (offset parameter). Underlying cause: improper sanit...

CVE-2006-3295

Open Guestbook 0.5 is affected by a cross-site scripting (XSS) vulnerability in header.php, exploitable via the title parameter to inject arbitrary script/HTML. The issue is associated with the header.php file in Open Guestbook 0.5, enabling remote attackers to inject script or HTML through the t...

CVE-2006-3296

SQL injection vulnerability in view.php in Open Guestbook 0.5 allows remote attackers to execute arbitrary SQL commands via the offset parameter...

CVE-2006-3295

Cross-site scripting XSS vulnerability in header.php in Open Guestbook 0.5 allows remote attackers to inject arbitrary web script or HTML via the title parameter...

PT-2006-4189 · Open Guestbook · Open Guestbook

Name of the Vulnerable Software and Affected Versions: Open Guestbook version 0.5 Description: A cross-site scripting issue exists, allowing remote attackers to inject arbitrary web script or HTML via the title parameter in the header.php file. Recommendations: For Open Guestbook version 0.5, avo...

openGuestbook.txt

Produce : Open Guestbook 0.5 Site : http://sourceforge.net/projects/openguestbook Discovred by: Moroccan Security Team Simo64 Greetz to : And All Friends : Details : ========= +Cross Site Scripting -vulnerable code in header.php on line 5 1 2 3 4 5 -------------------- Exploit :...