CVE-2006-0500

CVE-2006-0500 affects MyCO Guestbook 1.0, where the admin directory is stored under the web document root with insufficient access control. This allows remote attackers to access files directly via a URL and perform unspecified privileged actions. The CVSS data (NVD) indicates a network-accessibl...

CVE-2006-0501

The CVE-2006-0501 entry describes a cross-site scripting (XSS) vulnerability in MyCO Guestbook 1.0, exploitable via the Name field during user registration. The underlying issue is lack of proper input sanitization/escaping in the registration flow, enabling remote attackers to inject arbitrary s...