CVE-2007-1305

Published: Mar 7, 2007Modified: Apr 23, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

Multiple cross-site scripting (XSS) vulnerabilities in add2.php in Sava's Guestbook 23.11.2006 allow remote attackers to inject arbitrary web script or HTML via the (1) name, (2) country, (3) email, and (4) website parameters.

Affected (1)

Products: Savas Place: Savas Guestbook

Savas Place

1 product

Savas Guestbook

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Savas Place Savas Guestbook	Version 2006-11-23

References (12)

http://belsec.com/advisories/142/summary.html

Source: cve@mitre.org

URL Repurposed

http://secunia.com/advisories/24411

Source: cve@mitre.org

http://securityreason.com/securityalert/2350

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/461910/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/22820

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/32812

Source: cve@mitre.org

http://belsec.com/advisories/142/summary.html