Phphg Guestbook@1.2 Security Vulnerabilities and Issues — Phphg Guestbook@1.2 CVE List

Lucene search

Hinton DesignPhphg Guestbook1.2

3 matches found

CVE•added 2006/02/08 11:2 p.m.•43 views

CVE-2006-0602

Multiple SQL injection vulnerabilities in Hinton Design phphg Guestbook 1.2 allow remote attackers to execute arbitrary SQL commands via the (1) username parameter to check.php or the id parameter to (2) admin/edit_smilie.php, (3) admin/add_theme.php, (4) admin/ban_ip.php, (5) admin/add_lang.php, o...

7.5CVSS8.5AI score0.01674EPSS

CVE•added 2006/02/08 11:2 p.m.•43 views

CVE-2006-0604

check.php in Hinton Design phphg Guestbook 1.2 does not check the user password when authenticating via cookies, which allows remote attackers to gain unauthorized access.

7.5CVSS7AI score0.01861EPSS

CVE•added 2006/02/08 11:2 p.m.•39 views

CVE-2006-0603

Multiple cross-site scripting vulnerabilities in signed.php in Hinton Design phphg Guestbook 1.2 allow remote attackers to inject arbitrary web script or HTML via the (1) location, (2) website, or (3) message parameter.

6.4CVSS6.1AI score0.011EPSS