Vulnerabilities

TI-2009-02328 CVE-2009-2440 · GHSA-p823-qr2p-j2x5

Cross-site scripting (XSS) vulnerability in index.php in JNM Guestbook 3.0 allows remote…

LOW 23

Cross-site scripting (XSS) vulnerability in index.php in JNM Guestbook 3.0 allows remote attackers to inject arbitrary web script or HTML via the page parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01656 Published 2009-07-13 No fix listed CWE-79

TI-2009-02018 CVE-2009-2111 · GHSA-2x8w-vwh8-qfm3

Static code injection vulnerability in add_reg.php in DB Top Sites 1.0 allows remote…

MEDIUM 49

Static code injection vulnerability in add_reg.php in DB Top Sites 1.0 allows remote attackers to inject arbitrary PHP code via a crafted (1) url and (2) location parameter.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.03749 Published 2009-06-18 No fix listed CWE-94

TI-2009-02017 CVE-2009-2110 · GHSA-hgmj-xfjc-p5m9

Multiple directory traversal vulnerabilities in DB Top Sites 1.0, when magic_quotes_gpc…

MEDIUM 44

Multiple directory traversal vulnerabilities in DB Top Sites 1.0, when magic_quotes_gpc is disabled, allow remote attackers to include and execute arbitrary local files via a ..

CVSS 2.0HIGH 7.6 Network No auth Interaction — EPSS 0.08447 Published 2009-06-18 No fix listed CWE-22

Vulnerabilities

Filters

Cross-site scripting (XSS) vulnerability in index.php in JNM Guestbook 3.0 allows remote…

Static code injection vulnerability in add_reg.php in DB Top Sites 1.0 allows remote…

Multiple directory traversal vulnerabilities in DB Top Sites 1.0, when magic_quotes_gpc…