Skip to main content
cvebuzz

CVE mentions, exploit signals, and PoC evidence in one fast public view.

Vendor archive

alexphpteam CVEs

Beta · best-effort

6 CVEs tagged to vendor alexphpteam — 0 Critical, 3 High, 3 Medium, 0 Low, 0 Unrated.

See this archive with more filtersView vendor evidence profileExplore

CVE-2008-7141

Published Sep 1, 2009

Cross-site scripting (XSS) vulnerability in setup.php in @lex Poll 2.1 allows remote attackers to inject arbitrary web script or HTML via the language_setup parameter. NOTE: the…

CVSS 4.3 · Medium
Vendor/product tagsBeta · best-effort

CVE-2007-0205

Published Jan 11, 2007

Directory traversal vulnerability in admin/skins.php for @lex Guestbook 4.0.2 and earlier allows remote attackers to create files in arbitrary directories via ".." sequences in th…

CVSS 7.5 · High
Vendor/product tagsBeta · best-effort

CVE-2007-0202

Published Jan 11, 2007

SQL injection vulnerability in index.php in @lex Guestbook 4.0.2 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the…

CVSS 7.5 · High
Vendor/product tagsBeta · best-effort

CVE-2006-6278

Published Dec 4, 2006

Cross-site scripting (XSS) vulnerability in index.php in @lex Guestbook 4.0.1 allows remote attackers to inject arbitrary web script or HTML via the skin parameter.

CVSS 6.8 · Medium
Vendor/product tagsBeta · best-effort

CVE-2006-6279

Published Dec 4, 2006

index.php in @lex Guestbook 4.0.1 allows remote attackers to obtain sensitive information via a skin parameter referencing a nonexistent skin, which reveals the installation path…

CVSS 5.0 · Medium
Vendor/product tagsBeta · best-effort

CVE-2004-1554

Published Dec 31, 2004

PHP remote file inclusion vulnerability in livre_include.php in @lex Guestbook allows remote attackers to execute arbitrary PHP code by modifying the chem_absolu parameter to refe…

CVSS 7.5 · High
Vendor/product tagsBeta · best-effort
Showing 1-6 of 6 CVEsPage 1 of 1