Vulnerabilities

TI-2006-01644 CVE-2006-1698 · GHSA-4g8f-f2wr-wmxm

Cross-site scripting (XSS) vulnerability in Matt Wright Guestbook 2.3.1 allows remote…

LOW 22

Cross-site scripting (XSS) vulnerability in Matt Wright Guestbook 2.3.1 allows remote attackers to execute arbitrary web script or HTML via the (1) url, (2) city, (3) state, or (4) country parameters.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01164 Published 2006-04-11 No fix listed

TI-2006-01643 CVE-2006-1697 · GHSA-j6w5-7wgg-qq7q

Cross-site scripting (XSS) vulnerability in Matt Wright Guestbook 2.3.1 allows remote…

LOW 24

Cross-site scripting (XSS) vulnerability in Matt Wright Guestbook 2.3.1 allows remote attackers to execute arbitrary web script or HTML via the (1) Your Name, (2) E-Mail, or (3) Comments fields when posting a message.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02143 Published 2006-04-11 No fix listed

TI-1999-01003 CVE-1999-1053 · GHSA-7fhv-p5jq-2v6f

guestbook.pl cleanses user-inserted SSI commands by removing text between "<!--" and…

HIGH 74

guestbook.pl cleanses user-inserted SSI commands by removing text between "" separators, which allows remote attackers to execute arbitrary commands when guestbook.pl is run on Apache 1.3.9 and possibly oth…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.85205 Published 2001-09-12 No fix listed

Vulnerabilities

Filters

Cross-site scripting (XSS) vulnerability in Matt Wright Guestbook 2.3.1 allows remote…

Cross-site scripting (XSS) vulnerability in Matt Wright Guestbook 2.3.1 allows remote…

guestbook.pl cleanses user-inserted SSI commands by removing text between "<!--" and…