Winn

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Winn records in CISA KEV

No Winn vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Winn Guestbook 2 records LOW Asp Guestbook 1 record LOW

Records

3 records

TI-2009-04516 CVE-2009-4760 · GHSA-q4rw-2c6x-6r6x

Winn ASP Guestbook 1.01 Beta stores sensitive information under the web root with…

LOW 28

Winn ASP Guestbook 1.01 Beta stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for data/guestbook.mdb.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02587 Published 2010-03-29 No fix listed CWE-264

TI-2011-04303 CVE-2011-5026 · GHSA-p6cg-c78j-hqmv

Cross-site scripting (XSS) vulnerability in the addPost function in data/functions.php in…

LOW 23

Cross-site scripting (XSS) vulnerability in the addPost function in data/functions.php in Winn GuestBook before 2.4.8d allows remote attackers to inject arbitrary web script or HTML via the name parameter to index.php.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01602 Published 2011-12-29 No fix listed CWE-79

TI-2009-04434 CVE-2009-4678 · GHSA-2vx8-24mr-f6q5

Cross-site scripting (XSS) vulnerability in index.php in Winn Guestbook 2.4 allows remote…

LOW 23

Cross-site scripting (XSS) vulnerability in index.php in Winn Guestbook 2.4 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.0153 Published 2010-03-08 No fix listed CWE-79

Open these records in search →

Critical	0
High	0
Medium	3
Low	0
No CVSS	0