Lucene search
+L

6 matches found

exploitpack
exploitpack
•added 2011/07/27 12:00 a.m.•42 views

PHPJunkYard GBook 1.61.7 - Multiple Cross-Site Scripting Vulnerabilities

PHPJunkYard GBook 1.61.7 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/48905/info PHPJunkYard GBook is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these...

0.3AI score
SaveExploits0
NVD
NVD
•added 2009/07/24 4:30 p.m.•28 views

CVE-2009-2592

SQL injection vulnerability in guestbook.php in PHPJunkYard GBook 1.6 allows remote attackers to execute arbitrary SQL commands via the mesid parameter...

7.5CVSS8.4AI score0.01086EPSS
SaveExploits0References2
Prion
Prion
•added 2009/07/24 4:30 p.m.•23 views

Sql injection

SQL injection vulnerability in guestbook.php in PHPJunkYard GBook 1.6 allows remote attackers to execute arbitrary SQL commands via the mesid parameter...

7.5CVSS9.1AI score0.01086EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2009/07/24 4:00 p.m.•35 views

CVE-2009-2592

SQL injection vulnerability in guestbook.php in PHPJunkYard GBook 1.6 allows remote attackers to execute arbitrary SQL commands via the mesid parameter...

8.4AI score0.01086EPSS
SaveExploits0References2
CVE
CVE
•added 2009/07/24 4:00 p.m.•62 views

CVE-2009-2592

The CVE-2009-2592 entry affects PHPJunkYard GBook 1.6, where a flaw in guestbook.php enables SQL injection via the mes_id parameter. This allows remote attackers to potentially run arbitrary SQL commands against the application's database. The vulnerability is described in publicly available sour...

7.5CVSS8.7AI score0.01086EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/07/24 12:00 a.m.•4 views

CVE-2009-2592: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in guestbook.php in PHPJunkYard GBook 1.6 allows remote attackers to execute arbitrary SQL commands via the mesid parameter...

7.5CVSS6.4AI score0.01086EPSS
SaveExploits0References2
Rows per page
Query Builder