Max's Guestbook Security Vulnerabilities

CJWSoft ASPGuest GuestBook 'edit.asp' - SQL Injection Vulnerability

Title: CJWSoft ASPGuest GuestBook 'edit.asp' - SQL Injection Vulnerability Product : CJWSoft ASPGuest GuestBook Version : Free Version Vendor: http://www.cjwsoft.com/aspguest/default.asp Class: Input Validation Error CVE: Remote: Yes Local: No Published: 2012-02-24 Updated: Impact :...

Max Guestbook 1.0 - Multiple Vulnerabilities

...

Max Guestbook 1.0 - Multiple Vulnerabilities

Max Guestbook 1.0 - Multiple...

Maxs Guestbook 1.0 - Multiple Remote Vulnerabilities

Maxs Guestbook 1.0 - Multiple Remote...

Max's Guestbook 1.0 - Multiple Remote Vulnerabilities

...

Max's Guestbook 1.0 Local File Inclusion / Path Disclosure

...

Lastguru ASP Guestbook SQL Injection

...

LastGuru ASP Guestbook - 'View.asp' SQL Injection

...

shypostShyPost enterprise website management system a number of vulnerabilities-vulnerability warning-the black bar safety net

ShyPost enterprise management system with dozens of templates, the user can freely choose a different template background management functions is the same, the following is one of the templates before and after the test, welcome to the user testing. Background demo:...

LastGuru ASP Guestbook - View.asp SQL Injection

LastGuru ASP Guestbook - View.asp SQL...

CJWSoft ASPGuest Guestbook SQL Injection

...

Bart`s CMS - SQL Injection Vulnerability

Title: Bart`s CMS - SQL Injection Vulnerability Date: 2012-01-23 References: http://www.vulnerability-lab.com/get_content.php?id=390 VL-ID: 390 Introduction: It is a website Content Management System that is build with Codecharge Studio. There will also be a commercial package, which contains all.....

Motigo Forums/Calendar/Guestbook Cross Site Scripting

...

Hinnendahl Gaestebuch 1.2 RFI

Remote file include vulnerability in Gaestebuch guestbook/gbook.php Vulnerability Type: Remote File...

Bart's CMS SQL Injection

...

Bart`s CMS - SQL Injection Vulnerability

...

Bart`s CMS - SQL Injection Vulnerability

...

w-CMS 2.01 Multiple Vulnerabilities

Exploit for php platform in category web...

Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks,...

Ggb Guestbook - XSS Vulnerabilities

Title: Ggb Guestbook - XSS Vulnerabilities Software : Ggb Guestbook Software Version : 0.3.1 Vendor: http://gelin.ru/soft/project/ggb/ http://code.google.com/p/ggbook/ Vulnerability Published : 2012-01-05 Vulnerability Update Time : Status : Impact : Medium Bug Description : Ggb...

Winn Guestbook v2.4.8c Stored XSS

Exploit Title: Winn Guestbook v2.4.8c Stored XSS Date: 12/29/11 Author: G13 Software Link: http://code.google.com/p/winn-guestbook/, http://www.winn.ws Version: 2.4.8c Category: webapps (php) CVE: 2011-5026 Vulnerability There is no sanitation on the input of the name variable. This allows ...

Ggb Guestbook 0.3.1 Cross Site Scripting

...

Mavili Guestbook 200711 Cross Site Scripting / SQL Injection

...

CVE-2011-5026

Cross-site scripting (XSS) vulnerability in the addPost function in data/functions.php in Winn GuestBook before 2.4.8d allows remote attackers to inject arbitrary web script or HTML via the name parameter to index.php. NOTE: some of these details are obtained from third party...

CVE-2011-5026

Cross-site scripting (XSS) vulnerability in the addPost function in data/functions.php in Winn GuestBook before 2.4.8d allows remote attackers to inject arbitrary web script or HTML via the name parameter to index.php. NOTE: some of these details are obtained from third party...

Cross site scripting

Cross-site scripting (XSS) vulnerability in the addPost function in data/functions.php in Winn GuestBook before 2.4.8d allows remote attackers to inject arbitrary web script or HTML via the name parameter to index.php. NOTE: some of these details are obtained from third party...

CVE-2011-5026

Cross-site scripting (XSS) vulnerability in the addPost function in data/functions.php in Winn GuestBook before 2.4.8d allows remote attackers to inject arbitrary web script or HTML via the name parameter to index.php. NOTE: some of these details are obtained from third party...

Winn Guestbook 2.4.8c - Persistent Cross-Site Scripting

Winn Guestbook 2.4.8c - Persistent Cross-Site...

Winn Guestbook 2.4.8c Cross Site Scripting

...

Winn Guestbook v2.4.8c Stored XSS Vulnerability

Exploit for php platform in category web...

Winn Guestbook 2.4.8c - Persistent Cross-Site Scripting

...

Century wind enterprise website management system plug horse vulnerabilities and fixes-vulnerability warning-the black bar safety net

From www.0855.tv by Mr. DzY Century wind enterprise website management system of SME-oriented Web Site Management System,page fine,atmosphere. Having a stable set of strong,multi-function,Safety,code loading speed,web site content management, easy operation and other advantages. The use of...

CVE-2010-4987

SQL injection vulnerability in default.asp in KMSoft Guestbook (aka GBook) allows remote attackers to execute arbitrary SQL commands via the p...

CVE-2010-4987

SQL injection vulnerability in default.asp in KMSoft Guestbook (aka GBook) allows remote attackers to execute arbitrary SQL commands via the p...

CVE-2010-4996

SQL injection vulnerability in ogp_show.php in esoftpro Online Guestbook Pro 5.1 allows remote attackers to execute arbitrary SQL commands via the search...

CVE-2010-4996

SQL injection vulnerability in ogp_show.php in esoftpro Online Guestbook Pro 5.1 allows remote attackers to execute arbitrary SQL commands via the search...

Sql injection

SQL injection vulnerability in default.asp in KMSoft Guestbook (aka GBook) allows remote attackers to execute arbitrary SQL commands via the p...

Sql injection

SQL injection vulnerability in ogp_show.php in esoftpro Online Guestbook Pro 5.1 allows remote attackers to execute arbitrary SQL commands via the search...

CVE-2010-4996

SQL injection vulnerability in ogp_show.php in esoftpro Online Guestbook Pro 5.1 allows remote attackers to execute arbitrary SQL commands via the search...

CVE-2010-4987

SQL injection vulnerability in default.asp in KMSoft Guestbook (aka GBook) allows remote attackers to execute arbitrary SQL commands via the p...

YOTHCMS guestbook write horse vulnerabilities and fixes-vulnerability warning-the black bar safety net

Some time ago released this system to traverse a directory problem. Feedback after the official has been amended. Today stumbled upon a new version of the Yothshop Mall system, can be found in Database inserted into a word, and a successful connection. Affect all versions. Official website:...

DEDECMS full version gotopage variable XSS ROOTKITS, 0DAY-vulnerability warning-the black bar safety net

Affected versions: DEDECMS full version The vulnerability described in: DEDECMS background landing template gotopage variable is not tested incoming data, leading toXSSvulnerabilities. \dede\templets\login.htm 6 5 the left and right <input type="hidden" name="gotopage" value="<? php if(!...

CVE-2010-4884

PHP remote file inclusion vulnerability in guestbook/gbook.php in Gaestebuch 1.2 allows remote attackers to execute arbitrary PHP code via a URL in the script_pfad...

CVE-2010-4884

PHP remote file inclusion vulnerability in guestbook/gbook.php in Gaestebuch 1.2 allows remote attackers to execute arbitrary PHP code via a URL in the script_pfad...

Remote file inclusion

PHP remote file inclusion vulnerability in guestbook/gbook.php in Gaestebuch 1.2 allows remote attackers to execute arbitrary PHP code via a URL in the script_pfad...

CVE-2010-4884

PHP remote file inclusion vulnerability in guestbook/gbook.php in Gaestebuch 1.2 allows remote attackers to execute arbitrary PHP code via a URL in the script_pfad...

CVE-2010-4865

SQL injection vulnerability in the JE Guestbook (com_jeguestbook) component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the d_itemid parameter in an item_detail action to...

CVE-2010-4865

SQL injection vulnerability in the JE Guestbook (com_jeguestbook) component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the d_itemid parameter in an item_detail action to...

Sql injection

SQL injection vulnerability in the JE Guestbook (com_jeguestbook) component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the d_itemid parameter in an item_detail action to...

CVE-2010-4865

SQL injection vulnerability in the JE Guestbook (com_jeguestbook) component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the d_itemid parameter in an item_detail action to...