Vulnerabilities

TI-2006-06819 CVE-2006-7077 · GHSA-fgw5-r7j2-pxh9

SQL injection vulnerability in guestbook.php in Advanced Guestbook 2.4 for phpBB allows…

LOW 32

SQL injection vulnerability in guestbook.php in Advanced Guestbook 2.4 for phpBB allows remote attackers to execute arbitrary SQl commands via the entry parameter.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01171 Published 2007-02-27 No fix listed

TI-2006-06818 CVE-2006-7076 · GHSA-34c2-xgp5-5cjc

Cross-site scripting (XSS) vulnerability in guestbook.php in Advanced Guestbook 2.4 for…

LOW 22

Cross-site scripting (XSS) vulnerability in guestbook.php in Advanced Guestbook 2.4 for phpBB allows remote attackers to inject arbitrary web script or HTML via the entry parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01014 Published 2007-02-27 No fix listed

TI-2006-02096 CVE-2006-2152 · GHSA-vwv9-wpj4-ff2f

PHP remote file inclusion vulnerability in admin/addentry.php in phpBB Advanced Guestbook…

MEDIUM 44

PHP remote file inclusion vulnerability in admin/addentry.php in phpBB Advanced Guestbook 2.4.0 and earlier, when register_globals is enabled, allows remote attackers to include arbitrary files via the phpbb_root_path pa…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.08535 Published 2006-05-03 No fix listed

Vulnerabilities

Filters

SQL injection vulnerability in guestbook.php in Advanced Guestbook 2.4 for phpBB allows…

Cross-site scripting (XSS) vulnerability in guestbook.php in Advanced Guestbook 2.4 for…

PHP remote file inclusion vulnerability in admin/addentry.php in phpBB Advanced Guestbook…