Advanced Guestbook

10 CVEs across 1 Advanced Guestbook products. Browse Advanced Guestbook vulnerabilities, severities, and proof-of-concept exploits.

Advanced Guestbook products with known CVEs

ProductCVEs
Advanced Guestbook10
Advanced Guestbook CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2007-06092007-05-09Directory traversal vulnerability in Advanced Guestbook 2.4.2 allows remote attackers to bypass .htaccess settings, and execute arbitrary PHP local files or re…
CVE-2007-06082007-05-09Advanced Guestbook 2.4.2 allows remote attackers to obtain sensitive information via an invalid (1) GB_TBL parameter to (a) lang/codes-english.php or (b) image…
CVE-2007-06052007-05-09Cross-site scripting (XSS) vulnerability in picture.php in Advanced Guestbook 2.4.2 allows remote attackers to inject arbitrary web script or HTML via the pict…
CVE-2007-05302007-01-26Multiple PHP remote file inclusion vulnerabilities in Advanced Guestbook 2.4.2 allow remote attackers to execute arbitrary PHP code via a URL in the include_pa…
CVE-2006-58042006-11-08PHP remote file inclusion vulnerability in admin.php in Advanced Guestbook 2.3.1 allows remote attackers to execute arbitrary PHP code via a URL in the include…
CVE-2005-46492005-12-31Multiple cross-site scripting (XSS) vulnerabilities in Advanced Guestbook 2.2 and 2.3.1 allow remote attackers to inject arbitrary web script or HTML via (1) t…
CVE-2005-35882005-11-16SQL injection vulnerability in admin.php in Advanced Guestbook 2.2 allows remote attackers to execute arbitrary SQL commands and gain privileges via the userna…
CVE-2005-15482005-05-14SQL injection vulnerability in index.php in Advanced Guestbook 2.3.1 allows remote attackers to execute arbitrary SQL commands via the entry parameter.
CVE-2004-12132005-01-10Cross-site scripting (XSS) vulnerability in index.php in Advanced Guestbook 2.3.1, 2.2, and possibly other versions allows remote attackers to inject arbitrary…
CVE-2004-19522004-04-23SQL injection vulnerability in Advanced Guestbook 2.2 allows remote attackers to execute arbitrary SQL commands and gain privileges via the password.