Vendor/product archive

michael_salzer / guestbox CVEs

Beta · best-effort

3 CVEs tagged to michael_salzer / guestbox — 0 Critical, 0 High, 3 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to michael_salzer vendor archive

CVE-2006-0859

Published Feb 23, 2006

Michael Salzer Guestbox 0.6, and other versions before 0.8, allows remote attackers to post an admin comment to a guestbook entry via a certain modified form, possibly related to…

CVSS 5.0 · Medium

Vendor/product tagsBeta · best-effort

CVE-2006-0860

Published Feb 23, 2006

Multiple cross-site scripting (XSS) vulnerabilities in Michael Salzer Guestbox 0.6, and other versions before 0.8, allow remote attackers to inject arbitrary web script or HTML vi…

CVSS 4.3 · Medium

Vendor/product tagsBeta · best-effort

CVE-2006-0861

Published Feb 23, 2006

Michael Salzer Guestbox 0.6, and other versions before 0.8, allows remote attackers to obtain the source IP addresses of guestbook entries via a direct request to /gb/gblog.

CVSS 5.0 · Medium

Vendor/product tagsBeta · best-effort

Showing 1-3 of 3 CVEsPage 1 of 1