Kmsoft Guestbook
2 CVEs affecting Kmsoft Guestbook. Latest disclosed: 2011-11-01. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2010-4987 | | 2011-11-01 | SQL injection vulnerability in default.asp in KMSoft Guestbook (aka GBook) allows remote attackers to execute arbitrary SQL commands via the p parameter. | |
CVE-2010-0978 | | 2010-03-16 | KMSoft Guestbook (aka GBook) 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a… |