Vulnerabilities (CVE)

Filtered by vendor Levcgi.com Subscribe
Filtered by product Myguestbook
Total 3 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2002-0732 1 Levcgi.com 1 Myguestbook 2024-02-14 7.5 HIGH N/A
Cross-site scripting vulnerability in MyGuestbook 1.0 allows remote attackers to execute arbitrary script or inject HTML via fields such as (1) user name or (2) comments.
CVE-2005-2162 1 Levcgi.com 1 Myguestbook 2024-02-04 5.0 MEDIUM N/A
PHP remote file inclusion vulnerability in form.inc.php3 in MyGuestbook 0.6.1 allows remote attackers to execute arbitrary PHP code via the lang parameter.
CVE-2003-1241 1 Levcgi.com 1 Myguestbook 2024-02-04 4.3 MEDIUM N/A
Cross-site scripting vulnerability (XSS) in (1) admin_index.php, (2) admin_pass.php, (3) admin_modif.php, and (4) admin_suppr.php in MyGuestbook 3.0 allows remote attackers to execute arbitrary PHP code by modifying the location parameter to reference a URL on a remote web server that contains file.php via script injected into the pseudo, email, and message parameters.