alex_guestbook Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/alex_guestbook/ Sun, 26 Feb 2023 09:05:24 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png alex_guestbook Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/alex_guestbook/ 32 32 CVE-2007-0202 https://cvevulnerability.com/cve_vulnerabilities/cve-2007-0202/ Sun, 26 Feb 2023 09:05:24 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2007-0202/ SQL injection vulnerability in index.php in @lex Guestbook 4.0.2 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the lang parameter.

The post CVE-2007-0202 appeared first on CVE Vulnerability.

]]> SQL injection vulnerability in index.php in @lex Guestbook 4.0.2 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the lang parameter.

The post CVE-2007-0202 appeared first on CVE Vulnerability.

]]> CVE-2007-0205 https://cvevulnerability.com/cve_vulnerabilities/cve-2007-0205/ Sun, 26 Feb 2023 09:05:24 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2007-0205/ Directory traversal vulnerability in admin/skins.php for @lex Guestbook 4.0.2 and earlier allows remote attackers to create files in arbitrary directories via “..” sequences in the (1) aj_skin and (2) skin_edit parameters. NOTE: this can be leveraged for file inclusion by creating a skin file in the lang directory, then referencing that file via the lang […]

The post CVE-2007-0205 appeared first on CVE Vulnerability.

]]> Directory traversal vulnerability in admin/skins.php for @lex Guestbook 4.0.2 and earlier allows remote attackers to create files in arbitrary directories via “..” sequences in the (1) aj_skin and (2) skin_edit parameters. NOTE: this can be leveraged for file inclusion by creating a skin file in the lang directory, then referencing that file via the lang parameter to index.php, which passes a sanity check in livre_include.php.

The post CVE-2007-0205 appeared first on CVE Vulnerability.

]]>