2 matches found
CVE-2010-0940
Cross-site scripting XSS vulnerability in guestbook.php in Simple PHP Guestbook 1.0 allows remote attackers to inject arbitrary web script or HTML via the action parameter...
CVE-2010-0940
CVE-2010-0940 is a cross-site scripting (XSS) vulnerability in Simple PHP Guestbook 1.0, exploitable via the action parameter in guestbook.php. The affected component is the guestbook submission page; the root cause is reflected/script injection in user-provided input. Expected impact, as stated ...