CVE-2008-5852

CVE-2008-5852 affects Emefa Guestbook 3.0, where the database file guestbook.mdb is stored under the web root with insufficient access control. This configuration allows remote attackers to download the database via a direct request, leading to a partial confidentiality impact. The NVD entry assi...

CVE-2005-2650

The CVE-2005-2650 entry describes a cross-site scripting (XSS) vulnerability in Emefa Guestbook 1.2, specifically in sign.asp. The issue allows remote attackers to inject arbitrary script or HTML via the name, location, or email parameters, indicating insufficient input sanitization in the sign.a...