EUVD-2007-1302

Malware in sbrugna...

EUVD-2008-1643

Malware in sbrugna...

EUVD-2007-1301

Malware in sbrugna...

Directory traversal

Directory traversal vulnerability in index.php in Sava's GuestBook 2.0 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the action parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third...

CVE-2008-1642

Directory traversal vulnerability in index.php in Sava's GuestBook 2.0 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the action parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third...

CVE-2008-1642

The CVE-2008-1642 issue affects Sava’s GuestBook 2.0 (index.php) and is a directory traversal vulnerability that lets remote attackers cause local file inclusion and execution via directory traversal sequences in the action parameter. The root cause is improper validation of the action parameter ...

CVE-2007-1305

Multiple cross-site scripting XSS vulnerabilities in add2.php in Sava's Guestbook 23.11.2006 allow remote attackers to inject arbitrary web script or HTML via the 1 name, 2 country, 3 email, and 4 website parameters...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in add2.php in Sava's Guestbook 23.11.2006 allow remote attackers to inject arbitrary web script or HTML via the 1 name, 2 country, 3 email, and 4 website parameters...

Sql injection

Multiple SQL injection vulnerabilities in add2.php in Sava's Guestbook 23.11.2006, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 name, 2 country, 3 email, 4 website, and 5 message parameters...

CVE-2007-1304

Multiple SQL injection vulnerabilities in add2.php in Sava's Guestbook 23.11.2006, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 name, 2 country, 3 email, 4 website, and 5 message parameters...

CVE-2007-1305

Multiple cross-site scripting XSS vulnerabilities in add2.php in Sava's Guestbook 23.11.2006 allow remote attackers to inject arbitrary web script or HTML via the 1 name, 2 country, 3 email, and 4 website parameters...

CVE-2007-1305

CVE-2007-1305 describes multiple XSS flaws in Sava’s Guestbook add2.php (input fields: name, country, email, website). The root cause is insufficient sanitization/validation of user-supplied input, enabling script/HTML injection. Affected software: Sava’s Guestbook, version 23.11.2006 (add2.php)....

CVE-2007-1304

CVE-2007-1304 concerns multiple SQL injection vulnerabilities in add2.php of Sava’s Guestbook (version 23.11.2006). When magic_quotes_gpc is disabled, an attacker can manipulate the (1) name, (2) country, (3) email, (4) website, and (5) message parameters to execute arbitrary SQL commands. Affect...

Sava's GuestBook Multiple Vulnerabilities

New Advisory: Sava's GuestBook Multiple Vulnerablities http://belsec.com/advisories/142/summary.html --------------------Summary---------------- Belsec ID: BS0002 Software: Sava's GuestBook Sowtware's Web Site: http://savasplace.com Versions: 23.11.2006 Critical Level: Moderate Type: Multiple...