Mavili Guestbook Security Vulnerabilities and Issues — Mavili Guestbook CVE List

Lucene search

Mavili Guestbook ProjectMavili Guestbook

2 matches found

CVE•added 2012/10/04 5:55 p.m.•33 views

CVE-2012-5297

SQL injection vulnerability in edit.asp in Mavili Guestbook, as released in November 2007, allows remote attackers to execute arbitrary SQL commands via the id parameter.

7.5CVSS8.7AI score0.00403EPSS

CVE•added 2012/10/04 5:55 p.m.•30 views

CVE-2012-5299

Mavili Guestbook, as released in November 2007, allows remote attackers to edit, delete, and approve arbitrary messages via a direct request to (1) edit.asp, (2) delete.asp, or (3) approve.asp.

7.5CVSS7AI score0.00595EPSS