Skip to main content

CVE mentions, exploit signals, and PoC evidence in one fast public view.

Vendor/product archive

alexphpteam / alex_guestbook CVEs

Beta · best-effort

5 CVEs tagged to alexphpteam / alex_guestbook — 0 Critical, 3 High, 2 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to alexphpteam vendor archive

CVE-2007-0205

Published Jan 11, 2007

Directory traversal vulnerability in admin/skins.php for @lex Guestbook 4.0.2 and earlier allows remote attackers to create files in arbitrary directories via ".." sequences in th…

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

CVE-2007-0202

Published Jan 11, 2007

SQL injection vulnerability in index.php in @lex Guestbook 4.0.2 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the…

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

CVE-2006-6278

Published Dec 4, 2006

Cross-site scripting (XSS) vulnerability in index.php in @lex Guestbook 4.0.1 allows remote attackers to inject arbitrary web script or HTML via the skin parameter.

CVSS 6.8 · Medium

Vendor/product tagsBeta · best-effort

CVE-2006-6279

Published Dec 4, 2006

index.php in @lex Guestbook 4.0.1 allows remote attackers to obtain sensitive information via a skin parameter referencing a nonexistent skin, which reveals the installation path…

CVSS 5.0 · Medium

Vendor/product tagsBeta · best-effort

CVE-2004-1554

Published Dec 31, 2004

PHP remote file inclusion vulnerability in livre_include.php in @lex Guestbook allows remote attackers to execute arbitrary PHP code by modifying the chem_absolu parameter to refe…

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

Showing 1-5 of 5 CVEsPage 1 of 1