Mavili Guestbook Project Mavili Guestbook
4 CVEs affecting Mavili Guestbook Project Mavili Guestbook. Latest disclosed: 2012-10-04. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2012-5299 | | 2012-10-04 | Mavili Guestbook, as released in November 2007, allows remote attackers to edit, delete, and approve arbitrary messages via a direct request to (1) edit.asp, (… | |
CVE-2012-5298 | | 2012-10-04 | Mavili Guestbook, as released in November 2007, stores guestbook.mdb under the web root with insufficient access control, which allows remote attackers to read… | |
CVE-2012-5297 | | 2012-10-04 | SQL injection vulnerability in edit.asp in Mavili Guestbook, as released in November 2007, allows remote attackers to execute arbitrary SQL commands via the id… | |
CVE-2012-5296 | | 2012-10-04 | Multiple cross-site scripting (XSS) vulnerabilities in Mavili Guestbook, as released in November 2007, allow remote attackers to inject arbitrary web script or… |