Wwwguestbook

wwwguestbook

Vendor: Abczone.it • 2 CVEs

CVEs (2)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2005-1429 1Abczone.it 1Wwwguestbook Apr 16, 2026 May 3, 2005 N/A· v4 N/A· v3 7.5 HIGH· v2 SQL injection vulnerability in login.asp in WWWguestbook 1.1 allows remote attackers to execute arbitrary SQL commands via the password parameter.
CVE-2004-2428 1Abczone.it 1Wwwguestbook Apr 16, 2026 Dec 31, 2004 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Abczone.it WWWguestbook 1.1 stores db/dbase.mdb under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information such as the plaintext username and password.