Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
guestbook vulnerabilities and exploits
(subscribe to this query)
685
VMScore
CVE-2007-5821
Multiple directory traversal vulnerabilities in DM Guestbook 0.4.1 and previous versions allow remote malicious users to include and execute arbitrary local files via a .. (dot dot) in (1) the lng parameter to (a) guestbook.php, (b) admin/admin.guestbook.php, or (c) auto/glob_new...
Dm Guestbook Dm Guestbook
1 EDB exploit
515
VMScore
CVE-2006-4788
PHP remote file inclusion vulnerability in includes/log.inc.php in Telekorn SignKorn Guestbook (SL) 1.3 and previous versions, when register_globals is enabled and _SESSION[permission] parameter is set to "yes", allows remote malicious users to execute arbitrary PHP cod...
Telekorn Signkorn Guestbook
Telekorn Signkorn Guestbook 1.1
Telekorn Signkorn Guestbook 1.2
1 EDB exploit
615
VMScore
CVE-2006-4889
Multiple PHP remote file inclusion vulnerabilities in Telekorn SignKorn Guestbook (SL) 1.3 and previous versions, when register_globals is enabled, allow remote malicious users to execute arbitrary PHP code via a URL in the dir_path parameter in (1) index.php, (2) includes/functi...
Telekorn Signkorn Guestbook
Telekorn Signkorn Guestbook 1.1
Telekorn Signkorn Guestbook 1.2
21 EDB exploits
755
VMScore
CVE-2004-1952
SQL injection vulnerability in Advanced Guestbook 2.2 allows remote malicious users to execute arbitrary SQL commands and gain privileges via the password.
Advanced Guestbook Advanced Guestbook 2.2
1 EDB exploit
383
VMScore
CVE-2012-5296
Multiple cross-site scripting (XSS) vulnerabilities in Mavili Guestbook, as released in November 2007, allow remote malicious users to inject arbitrary web script or HTML via the id parameter to (1) approve.asp, (2) delete.asp, (3) edit.asp, or (4) edit2.asp.
Mavili Guestbook Project Mavili Guestbook -
668
VMScore
CVE-2012-5297
SQL injection vulnerability in edit.asp in Mavili Guestbook, as released in November 2007, allows remote malicious users to execute arbitrary SQL commands via the id parameter.
Mavili Guestbook Project Mavili Guestbook -
445
VMScore
CVE-2012-5298
Mavili Guestbook, as released in November 2007, stores guestbook.mdb under the web root with insufficient access control, which allows remote malicious users to read the database via a direct request.
Mavili Guestbook Project Mavili Guestbook -
668
VMScore
CVE-2012-5299
Mavili Guestbook, as released in November 2007, allows remote malicious users to edit, delete, and approve arbitrary messages via a direct request to (1) edit.asp, (2) delete.asp, or (3) approve.asp.
Mavili Guestbook Project Mavili Guestbook -
685
VMScore
CVE-2015-8351
PHP remote file inclusion vulnerability in the Gwolle Guestbook plugin prior to 1.5.4 for WordPress, when allow_url_include is enabled, allows remote authenticated users to execute arbitrary PHP code via a URL in the abspath parameter to frontend/captcha/ajaxresponse.php. NOTE: t...
Gwolle Guestbook Project Gwolle Guestbook
1 EDB exploit
668
VMScore
CVE-2006-5804
PHP remote file inclusion vulnerability in admin.php in Advanced Guestbook 2.3.1 allows remote malicious users to execute arbitrary PHP code via a URL in the include_path parameter.
Advanced Guestbook Advanced Guestbook 2.3.1
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
authentication bypass
CVE-2024-30043
camera
CVE-2023-40404
CVE-2024-2793
client side
CVE-2024-4469
CVE-2024-3565
CVE-2024-29825
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
7
NEXT »