Vulnerabilities

TI-2008-06829 CVE-2008-7141 · GHSA-44gx-rvj5-7hc2

Cross-site scripting (XSS) vulnerability in setup.php in @lex Poll 2.1 allows remote…

LOW 23

Cross-site scripting (XSS) vulnerability in setup.php in @lex Poll 2.1 allows remote attackers to inject arbitrary web script or HTML via the language_setup parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01436 Published 2009-09-01 No fix listed CWE-79

TI-2007-00200 CVE-2007-0205 · GHSA-4xj4-jgrg-3vvp

Directory traversal vulnerability in admin/skins.php for @lex Guestbook 4.0.2 and earlier…

LOW 39

Directory traversal vulnerability in admin/skins.php for @lex Guestbook 4.0.2 and earlier allows remote attackers to create files in arbitrary directories via ".." sequences in the (1) aj_skin and (2) skin_edit parameter…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.03365 Published 2007-01-11 No fix listed CWE-22

TI-2007-00197 CVE-2007-0202 · GHSA-68v5-rm7f-fv8h

SQL injection vulnerability in index.php in @lex Guestbook 4.0.2 and earlier, when…

LOW 39

SQL injection vulnerability in index.php in @lex Guestbook 4.0.2 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the lang parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.03825 Published 2007-01-11 No fix listed

TI-2006-06043 CVE-2006-6279 · GHSA-pv4f-hrvw-w7gm

index.php in @lex Guestbook 4.0.1 allows remote attackers to obtain sensitive information…

LOW 26

index.php in @lex Guestbook 4.0.1 allows remote attackers to obtain sensitive information via a skin parameter referencing a nonexistent skin, which reveals the installation path in an error message.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01504 Published 2006-12-04 No fix listed

TI-2006-06042 CVE-2006-6278 · GHSA-8632-w7w8-w55j

Cross-site scripting (XSS) vulnerability in index.php in @lex Guestbook 4.0.1 allows…

LOW 33

Cross-site scripting (XSS) vulnerability in index.php in @lex Guestbook 4.0.1 allows remote attackers to inject arbitrary web script or HTML via the skin parameter.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01414 Published 2006-12-04 No fix listed

TI-2004-01430 CVE-2004-1554 · GHSA-63mp-hhmw-vfc4

PHP remote file inclusion vulnerability in livre_include.php in @lex Guestbook allows…

MEDIUM 43

PHP remote file inclusion vulnerability in livre_include.php in @lex Guestbook allows remote attackers to execute arbitrary PHP code by modifying the chem_absolu parameter to reference a URL on a remote web server that c…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.07345 Published 2005-02-20 No fix listed