Vulnerabilities > Freescripts

DATE CVE VULNERABILITY TITLE RISK
2004-01-05 CVE-2003-0981 Origin Validation Error vulnerability in Freescripts Visitorbook LE
FreeScripts VisitorBook LE (visitorbook.pl) logs the reverse DNS name of a visiting host, which allows remote attackers to spoof the origin of their incoming requests and facilitate cross-site scripting (XSS) attacks.
network
low complexity
freescripts CWE-346
6.1
2004-01-05 CVE-2003-0980 Cross-Site Scripting vulnerability in Freescripts Visitorbook LE
Cross-site scripting (XSS) vulnerability in FreeScripts VisitorBook LE (visitorbook.pl) allows remote attackers to inject arbitrary HTML or web script via (1) the "do" parameter, (2) via the "user" parameter from a host with a malicious reverse DNS name, (3) via quote marks or ampersands in other parameters.
network
freescripts
4.3
2004-01-05 CVE-2003-0979 Remote Security vulnerability in Freescripts Visitorbook LE
FreeScripts VisitorBook LE (visitorbook.pl) does not properly escape line breaks in input, which allows remote attackers to (1) use VisitorBook as an open mail relay, when $mailuser is 1, via extra headers in the email field, or (2) cause the guestbook database to be deleted via a large number of line breaks that exceeds the $max_posts variable.
network
low complexity
freescripts
5.0