Vulnerabilities > Hogstorps

DATE CVE VULNERABILITY TITLE RISK
2006-06-02 CVE-2006-2773 Remote Security vulnerability in Hogstorps Hogstorp Guestbook 2.0
admin/redigera/redigera2.asp in Hogstorps hogstorp Guestbook 2.0 does not verify user credentials, which allows remote attackers to edit arbitrary posts via unspecified vectors.
network
low complexity
hogstorps
6.4
2006-06-02 CVE-2006-2772 HTML Injection vulnerability in Hogstorps Hogstorp Guestbook 2.0
Cross-site scripting (XSS) vulnerability in add.asp in Hogstorps hogstorp guestbook 2.0 allows remote attackers to inject arbitrary web script or HTML via the (1) name, (2) email, and (3) headline parameters.
network
hogstorps
6.8
2006-06-02 CVE-2006-2771 Unspecified vulnerability in Hogstorps Hogstorp Guestbook 2.0
admin/radera/tabort.asp in Hogstorps hogstorp guestbook 2.0 does not verify user credentials, which allows remote attackers to delete arbitrary posts via a modified delID parameter.
network
low complexity
hogstorps
6.4