CVE-2011-5201

CVE-2011-5201 affects the tinyguestbook application via sign.php, where there are concrete SQL injection vulnerabilities in the (1) name and (2) msg parameters. The underlying cause is unsanitized input leading to arbitrary SQL execution, enabling remote attackers to manipulate the database. Publ...

CVE-2011-5199

The CVE-2011-5199 entry describes a Cross-site Scripting (XSS) vulnerability in the TinyGuestbook project, specifically in sign.php where the msg parameter can be exploited to inject arbitrary web script or HTML. The available sources consistently identify the vulnerable component as sign.php wit...