2 matches found
CVE-2006-3617
The CVE-2006-3617 entry describes a Cross-site scripting (XSS) vulnerability in Pixelated By Lev (PBL) Guestbook, specifically pblguestbook.php, affecting PBL Guestbook 1.32 and earlier. The vulnerability allows remote attackers to inject arbitrary script or HTML via the name, message, website, a...
CVE-2006-3618
CVE-2006-3618 affects Pixelated By Lev (PBL) Guestbook, versions 1.32 and earlier, via SQL injection in pblguestbook.php. The vulnerability allows remote attackers to execute arbitrary SQL commands through the (1) name, (2) email, (3) website, (4) comments, (5) rate, and (6) private parameters. T...