Vulnerabilities

TI-2009-04443 CVE-2009-4687 · GHSA-fhqp-78f6-gc8r

SQL injection vulnerability in silentum_guestbook.php in Silentum Guestbook 2.0.2 allows…

LOW 35

SQL injection vulnerability in silentum_guestbook.php in Silentum Guestbook 2.0.2 allows remote attackers to execute arbitrary SQL commands via the messageid parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00928 Published 2010-03-10 No fix listed CWE-89

TI-2008-06453 CVE-2008-6764 · GHSA-3cr6-mg6c-353g

Cross-site scripting (XSS) vulnerability in login.php in Silentum LoginSys 1.0.0 allows…

LOW 23

Cross-site scripting (XSS) vulnerability in login.php in Silentum LoginSys 1.0.0 allows remote attackers to inject arbitrary web script or HTML via the message parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01497 Published 2009-04-28 No fix listed CWE-79

TI-2008-06452 CVE-2008-6763 · GHSA-473v-w8hj-5r3p

login2.php in Silentum LoginSys 1.0.0 allows remote attackers to bypass authentication…

MEDIUM 42

login2.php in Silentum LoginSys 1.0.0 allows remote attackers to bypass authentication and obtain access to an arbitrary account by setting the logged_in cookie to that account's username.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.06523 Published 2009-04-28 No fix listed CWE-287

Vulnerabilities

Filters

SQL injection vulnerability in silentum_guestbook.php in Silentum Guestbook 2.0.2 allows…

Cross-site scripting (XSS) vulnerability in login.php in Silentum LoginSys 1.0.0 allows…

login2.php in Silentum LoginSys 1.0.0 allows remote attackers to bypass authentication…