VendorsLevcgi.commyguestbookall versions
Vulnerabilities

Levcgi.com Myguestbook

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

3CVEs
CVE-2002-0732
Cross-site scripting vulnerability in MyGuestbook 1.0 allows remote attackers to execute arbitrary script or inject HTML via fields such as (1) user name or (2) comments.
Published 2002-07-26 · Modified
7.51 PoCEPSS 0.028
CVE-2005-2162
PHP remote file inclusion vulnerability in form.inc.php3 in MyGuestbook 0.6.1 allows remote attackers to execute arbitrary PHP code via the lang parameter.
Published 2005-07-06 · Modified
5.01 PoCEPSS 0.023
CVE-2003-1241
Cross-site scripting vulnerability (XSS) in (1) admin_index.php, (2) admin_pass.php, (3) admin_modif.php, and (4) admin_suppr.php in MyGuestbook 3.0 allows remote attackers to execute arbitrary PHP code by modifying the location parameter to reference a URL on a remote web server that contains file.php via script injected into the pseudo, email, and message parameters.
Published 2005-11-16 · Modified
4.3EPSS 0.013