Vulnerabilities > Simpgb
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2007-09-27 | CVE-2007-5127 | Cross-Site Scripting vulnerability in Simpgb 1.46.02 Multiple cross-site scripting (XSS) vulnerabilities in SimpGB 1.46.02 allow remote attackers to inject arbitrary web script or HTML via (1) the l_username parameter to the default URI under admin/ or (2) the l_emoticonlist parameter to admin/emoticonlist.php. | 4.3 |
| 2005-03-14 | CVE-2005-0786 | SQL Injection vulnerability in Simpgb 1.0 SQL injection vulnerability in gb_new.inc in SimpGB allows remote attackers to execute arbitrary SQL commands via the quote parameter to guestbook.php. | 7.5 |