Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
professional home page tools professional home page tools guestbook vulnerabilities and exploits
(subscribe to this query)
7.5
CVSSv2
CVE-2006-3752
Multiple SQL injection vulnerabilities in class.php in Professional Home Page Tools Guestbook allow remote malicious users to execute arbitrary SQL commands via the (1) hidemail, (2) name, (3) mail, (4) ip, or (5) text parameters.
Professional Home Page Tools Professional Home Page Tools Guestbook
6.4
CVSSv2
CVE-2006-3753
setcookie.php for the administration login in Professional Home Page Tools Guestbook records the hash of the administrator password in a cookie, which allows malicious users to conduct brute force password guessing attacks after obtaining the hash.
Professional Home Page Tools Professional Home Page Tools Guestbook
5
CVSSv2
CVE-2006-3837
delcookie.php in Professional Home Page Tools Guestbook changes the expiration date of a cookie instead of deleting the cookie's value, which makes it easier for malicious users to steal the cookie and obtain the administrator's password hash after logout.
Professional Home Page Tools Professional Home Page Tools Guestbook
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-22120
CVE-2024-35921
CVE-2024-35874
brute force
CVE-2024-36080
unprivileged
CVE-2024-35917
IDOR
CVE-2024-4947
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started