Savas Guestbook@2006-11-23 Security Vulnerabilities and Issues — Savas Guestbook@2006-11-23 CVE List

Lucene search

Savas PlaceSavas Guestbook2006-11-23

2 matches found

CVE•added 2007/03/07 12:19 a.m.•38 views

CVE-2007-1304

Multiple SQL injection vulnerabilities in add2.php in Sava's Guestbook 23.11.2006, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) name, (2) country, (3) email, (4) website, and (5) message parameters.

6.8CVSS8.5AI score0.0065EPSS

CVE•added 2007/03/07 12:19 a.m.•31 views

CVE-2007-1305

Multiple cross-site scripting (XSS) vulnerabilities in add2.php in Sava's Guestbook 23.11.2006 allow remote attackers to inject arbitrary web script or HTML via the (1) name, (2) country, (3) email, and (4) website parameters.

6.8CVSS5.8AI score0.00958EPSS