CVE-2003-1241

CVE-2003-1241 describes an XSS flaw in MyGuestbook 3.0 affecting (1) admin_index.php, (2) admin_pass.php, (3) admin_modif.php, and (4) admin_suppr.php. The vulnerability allows remote attackers to execute arbitrary PHP code by tweaking the location parameter to reference a URL on a remote server ...

CVE-2005-2162

The CVE-2005-2162 entry describes a PHP remote file inclusion vulnerability in the MyGuestbook 0.6.1 package, specifically in form.inc.php3, where the lang parameter can be exploited to execute arbitrary PHP code on the server. The connected documents confirm the affected product and vulnerabilit...

CVE-2002-0732

CVE-2002-0732 is a cross-site scripting vulnerability in MyGuestbook 1.0. The issue enables remote attackers to execute arbitrary script or inject HTML via fields such as user name and comments due to insufficient input validation. Affected: MyGuestbook 1.0 (version 1.0). Impact is remote script ...