4.3
CVSSv2

CVE-2004-1867

Published: 31/12/2004 Updated: 11/07/2017
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
VMScore: 435
Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Vulnerability Summary

Cross-site scripting (XSS) vulnerability in guest.cgi in Fresh Guest Book allows remote malicious users to inject arbitrary web script or HTML via the Name field.

Vulnerable Product Search on Vulmon Subscribe to Product

web fresh fresh guest book 1.0

web fresh fresh guest book 2.0

web fresh fresh guest book 2.1

Exploits

source: wwwsecurityfocuscom/bid/9995/info It has been reported that Fresh Guest Book is prone to a remote HTML injection vulnerability This issue is due to a failure of the application to properly sanitize user supplied form input An attacker may exploit the aforementioned vulnerabilities to execute arbitrary script code in the browser ...