Creative Guestbook

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Creative Guestbook records in CISA KEV

No Creative Guestbook vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Creative Guestbook 2 records LOW

Records

2 records in Creative Guestbook · all components

TI-2007-01422 CVE-2007-1480 · GHSA-rvmj-j7rm-r69j

Creative Guestbook 1.0 allows remote attackers to add an administrative account via a…

LOW 37

Creative Guestbook 1.0 allows remote attackers to add an administrative account via a direct request to createadmin.php with Name, Email, and PASSWORD parameters set.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0243 Published 2007-03-16 No fix listed CWE-287

TI-2007-01421 CVE-2007-1479 · GHSA-4v62-8fqp-chch

Cross-site scripting (XSS) vulnerability in Guestbook.php in Creative Guestbook 1.0…

LOW 23

Cross-site scripting (XSS) vulnerability in Guestbook.php in Creative Guestbook 1.0 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.0163 Published 2007-03-16 No fix listed

Open these records in search →

Critical	0
High	1
Medium	1
Low	0
No CVSS	0