Vulnerabilities

TI-2002-01649 CVE-2002-1730 · GHSA-fj4g-f3v5-4vcj

ASPjar Guestbook 1.00 allows remote attackers to delete arbitrary messages accessing the…

LOW 26

ASPjar Guestbook 1.00 allows remote attackers to delete arbitrary messages accessing the delete.asp administrative script with certain cookie values set to "true".

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01351 Published 2005-06-21 No fix listed

TI-2002-01648 CVE-2002-1729 · GHSA-wgvc-2xvx-3252

Cross-site scripting vulnerability (XSS) in ASPjar Guestbook 1.00 allows remote attackers…

LOW 33

Cross-site scripting vulnerability (XSS) in ASPjar Guestbook 1.00 allows remote attackers to execute arbitrary script as other users via the "web site" parameter in a guestbook message.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01306 Published 2005-06-21 No fix listed

TI-2005-00382 CVE-2005-0424 · GHSA-4qgq-3ppm-rwc7

Unknown vulnerability in the delete.asp program in certain versions of ASPjar Guestbook…

LOW 26

Unknown vulnerability in the delete.asp program in certain versions of ASPjar Guestbook allows remote attackers to delete messages.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01351 Published 2005-02-15 No fix listed

TI-2005-00381 CVE-2005-0423 · GHSA-75jr-ff4h-qp4g

SQL injection vulnerability in login.asp in ASPjar Guestbook allows remote attackers to…

LOW 25

SQL injection vulnerability in login.asp in ASPjar Guestbook allows remote attackers to execute arbitrary SQL commands via the password field.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01185 Published 2005-02-15 No fix listed

Vulnerabilities

Filters

ASPjar Guestbook 1.00 allows remote attackers to delete arbitrary messages accessing the…

Cross-site scripting vulnerability (XSS) in ASPjar Guestbook 1.00 allows remote attackers…

Unknown vulnerability in the delete.asp program in certain versions of ASPjar Guestbook…

SQL injection vulnerability in login.asp in ASPjar Guestbook allows remote attackers to…