Vulnerabilities

TI-2007-01566 CVE-2007-1625 · GHSA-xrfv-px7m-pw9w

Cross-site scripting (XSS) vulnerability in save_entry.php in realGuestbook 5.01 allows…

LOW 22

Cross-site scripting (XSS) vulnerability in save_entry.php in realGuestbook 5.01 allows remote attackers to inject arbitrary web script or HTML via the homepage parameter, as reachable through add_entry.php.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01163 Published 2007-03-23 No fix listed

TI-2007-01565 CVE-2007-1624 · GHSA-984m-cxrr-jg7q

Multiple SQL injection vulnerabilities in realGuestbook 5.01 allow remote attackers to…

LOW 35

Multiple SQL injection vulnerabilities in realGuestbook 5.01 allow remote attackers to execute arbitrary SQL commands via the (1) name, (2) email, (3) homepage, and (4) text parameters to save_entry.php, as reachable thr…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01117 Published 2007-03-23 No fix listed

TI-2007-01564 CVE-2007-1623 · GHSA-45w4-8c44-vq2j

Multiple cross-site scripting (XSS) vulnerabilities in realGuestbook 5.01, when…

LOW 22

Multiple cross-site scripting (XSS) vulnerabilities in realGuestbook 5.01, when register_globals is enabled, allow remote attackers to inject arbitrary web script or HTML via the (1) bg_color_1, (2) fs_menu, (3) fc_menu,…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.00888 Published 2007-03-23 No fix listed

Vulnerabilities

Filters

Cross-site scripting (XSS) vulnerability in save_entry.php in realGuestbook 5.01 allows…

Multiple SQL injection vulnerabilities in realGuestbook 5.01 allow remote attackers to…

Multiple cross-site scripting (XSS) vulnerabilities in realGuestbook 5.01, when…