Dmsguestbook@1.7.0 Security Vulnerabilities and Issues — Dmsguestbook@1.7.0 CVE List

Lucene search

Dmsguestbook ProjectDmsguestbook1.7.0

4 matches found

CVE•added 2008/02/06 12:0 p.m.•86 views

CVE-2008-0616

SQL injection vulnerability in the administration panel in the DMSGuestbook 1.7.0 plugin for WordPress allows remote authenticated administrators to execute arbitrary SQL commands via unspecified vectors. NOTE: it is not clear whether this issue crosses privilege boundaries.

6.5CVSS7.8AI score0.0072EPSS

CVE•added 2008/02/06 12:0 p.m.•67 views

CVE-2008-0615

Directory traversal vulnerability in wp-admin/admin.php in the DMSGuestbook 1.8.0 and 1.7.0 plugin for WordPress allows remote authenticated users to read arbitrary files via a .. (dot dot) in the (1) folder and (2) file parameters.

4CVSS6.3AI score0.00426EPSS

CVE•added 2008/02/06 12:0 p.m.•53 views

CVE-2008-0618

Multiple cross-site scripting (XSS) vulnerabilities in the DMSGuestbook 1.8.0 and 1.7.0 plugin for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) gbname, (2) gbemail, (3) gburl, and (4) gbmsg parameters to unspecified programs. NOTE: the provenance of this infor...

4.3CVSS5.8AI score0.00358EPSS

CVE•added 2008/02/06 12:0 p.m.•46 views

CVE-2008-0617

Multiple cross-site scripting (XSS) vulnerabilities in the DMSGuestbook 1.7.0 plugin for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) file parameter to wp-admin/admin.php, or the (2) messagefield parameter in the guestbook page, and the (3) title parameter in ...

4.3CVSS5.9AI score0.004EPSS