CVE-2003-1293

CVE-2003-1293 describes multiple cross-site scripting (XSS) vulnerabilities in NukedWeb GuestBookHost. According to the description, remote attackers can inject arbitrary web script or HTML via the (1) Name, (2) Email, and (3) Message fields when signing the guestbook. The provided documents do n...

CVE-2006-0542

CVE-2006-0542 describes multiple SQL injection vulnerabilities in the NukedWeb GuestBookHost 2005.04.25, specifically in config.php where the email and password parameters are not properly sanitized. This allows remote attackers to execute arbitrary SQL commands via those parameters, potentially ...