Vulnerabilities (CVE)

Filtered by vendor Digioz Subscribe
Filtered by product Digioz Guestbook
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2009-3189 1 Digioz 1 Digioz Guestbook 2024-02-04 4.3 MEDIUM N/A
Cross-site scripting (XSS) vulnerability in search.php in DigiOz Guestbook 1.7.2 allows remote attackers to inject arbitrary web script or HTML via the search_term parameter.
CVE-2006-5651 1 Digioz 1 Digioz Guestbook 2024-02-04 5.0 MEDIUM N/A
list.php in DigiOz Guestbook before 1.7.1 allows remote attackers to obtain sensitive information via a non-numeric page parameter, which displays the installation path in the resulting error message.