Vulnerabilities > Realguestbook
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2007-03-23 | CVE-2007-1625 | Cross-Site Scripting vulnerability in Realguestbook 5.01 Cross-site scripting (XSS) vulnerability in save_entry.php in realGuestbook 5.01 allows remote attackers to inject arbitrary web script or HTML via the homepage parameter, as reachable through add_entry.php. network realguestbook | 4.3 |
| 2007-03-23 | CVE-2007-1624 | SQL Injection and Cross-Site Scripting vulnerability in Realguestbook 5.01 Multiple SQL injection vulnerabilities in realGuestbook 5.01 allow remote attackers to execute arbitrary SQL commands via the (1) name, (2) email, (3) homepage, and (4) text parameters to save_entry.php, as reachable through add_entry.php; and possibly other unspecified parameters and files. | 7.5 |
| 2007-03-23 | CVE-2007-1623 | Cross-Site Scripting vulnerability in Realguestbook 5.01 Multiple cross-site scripting (XSS) vulnerabilities in realGuestbook 5.01, when register_globals is enabled, allow remote attackers to inject arbitrary web script or HTML via the (1) bg_color_1, (2) fs_menu, (3) fc_menu, (4) ff_menu, (5) bg_color_2, (6) fs_normal, (7) fc_normal, and (8) ff_normal parameters to welcome_admin.php; and possibly unspecified other parameters and files. network realguestbook | 4.3 |