CVE-2009-4935

The CVE-2009-4935 entry concerns a SQL injection in Online Guestbook Pro, specifically ogp_show.php via the display parameter. The root cause is improper handling of user input in that parameter, enabling attackers to craft arbitrary SQL commands. Impact per CVSS indicates partial disclosure, mod...

CVE-2010-4996

The CVE-2010-4996 entry concerns esoftpro Online Guestbook Pro 5.1, where ogp_show.php is vulnerable to SQL injection via the search parameter, enabling remote attackers to execute arbitrary SQL commands. No remediation details are provided in the connected documents. If applying, verify patched ...

CVE-2009-2448

CVE-2009-2448 describes a cross-site scripting (XSS) vulnerability in the file ogp_show.php of Online Guestbook Pro 5.1. The issue allows remote attackers to inject arbitrary web script or HTML via the search_choice parameter. This entry notes that the provenance of information is unknown and det...

CVE-2009-2447

Online Guestbook Pro 5.1 contains multiple XSS vulnerabilities in ogp_show.php, exploitable via the search or display parameter to inject arbitrary script/HTML. This is documented across multiple feeds (NVD, Red Hat, CVE records). The connected sources confirm the affected component and vector bu...

CVE-2009-2441

The CVE-2009-2441 entry describes a Cross-site Scripting (XSS) vulnerability in Online Guestbook Pro 5.1, specifically in the ogp_show.php script, where an attacker can inject arbitrary web script or HTML via the entry parameter. The affected software is Online Guestbook Pro 5.1; the vulnerable c...