CVE-2014-8293

CVE-2014-8293 affects Voice Of Web AllMyGuests 0.4.1 with a reflected XSS via the AMG_signin_topic parameter to index.php. The vulnerability allows remote attackers to inject arbitrary JavaScript/HTML into the page. The provided sources consistently describe the issue but do not specify affected ...

CVE-2014-8294

CVE-2014-8294 affects Voice Of Web AllMyGuests 0.4.1. The vulnerability allows remote attackers to inject arbitrary SQL via (1) the allmyphp_cookie cookie to admin.php or (2) the Username or (3) Password fields. Root cause: SQL injection in login/auth and cookie-handling logic. Impact: arbitrary ...

CVE-2008-1961

Voice Of Web AllMyGuests 0.4.1 is affected by CVE-2008-1961: an SQL injection in index.php allows remote attackers to execute arbitrary SQL via the AMG_id parameter in the comments action. Root cause: unsanitized AMG_id input in comments processing leads to query manipulation. No remediation deta...