EUVD-2011-5101

Malware in sbrugna...

EUVD-2011-5099

Malware in sbrugna...

CVE-2011-5199

Cross-site scripting XSS vulnerability in sign.php in tinyguestbook allows remote attackers to inject arbitrary web script or HTML via the msg parameter...

CVE-2011-5201

Multiple SQL injection vulnerabilities in sign.php in tinyguestbook allow remote attackers to execute arbitrary SQL commands via the 1 name and 2 msg parameters. NOTE: some of these details are obtained from third party information...

Cross site scripting

Cross-site scripting XSS vulnerability in sign.php in tinyguestbook allows remote attackers to inject arbitrary web script or HTML via the msg parameter...

CVE-2011-5201

Multiple SQL injection vulnerabilities in sign.php in tinyguestbook allow remote attackers to execute arbitrary SQL commands via the 1 name and 2 msg parameters. NOTE: some of these details are obtained from third party information...

CVE-2011-5199

Cross-site scripting XSS vulnerability in sign.php in tinyguestbook allows remote attackers to inject arbitrary web script or HTML via the msg parameter...

CVE-2011-5201

CVE-2011-5201 affects the tinyguestbook application via sign.php, where there are concrete SQL injection vulnerabilities in the (1) name and (2) msg parameters. The underlying cause is unsanitized input leading to arbitrary SQL execution, enabling remote attackers to manipulate the database. Publ...

CVE-2011-5199

The CVE-2011-5199 entry describes a Cross-site Scripting (XSS) vulnerability in the TinyGuestbook project, specifically in sign.php where the msg parameter can be exploited to inject arbitrary web script or HTML. The available sources consistently identify the vulnerable component as sign.php wit...

PT-2012-2176

Name of the Vulnerable Software and Affected Versions tinyguestbook affected versions not specified Description The issue is related to a cross-site scripting XSS vulnerability. It allows remote attackers to inject arbitrary web script or HTML via the msg parameter in the "sign.php" file...

CVE-2011-5199: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in sign.php in tinyguestbook allows remote attackers to inject arbitrary web script or HTML via the msg parameter...

CVE-2011-5201: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in sign.php in tinyguestbook allow remote attackers to execute arbitrary SQL commands via the 1 name and 2 msg parameters. NOTE: some of these details are obtained from third party information...

PT-2012-2178

Name of the Vulnerable Software and Affected Versions tinyguestbook affected versions not specified Description The issue concerns SQL injection vulnerabilities in the sign.php file of tinyguestbook. Remote attackers can execute arbitrary SQL commands by manipulating the name and msg parameters...

Tiny Guest Book Cross Site Scripting

Exploit Title: Tinyguestbook XSS Date: 01/03/12 Author: G13 Software Link: http://code.google.com/p/tinyguestbook/ Category: webapps php Vulnerability There is no sanitation on the input of the msg variable. This allows malicious scripts to be added. This is a stored XSS Vendor Notification...