CVEs (3)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
1Syguestbook A5 Project 1Syguestbook A5 Jun 17, 2026 Jul 18, 2019 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 index.php?c=admin&a=index in SyGuestBook A5 Version 1.2 has stored XSS via a reply to a comment. |
1Syguestbook A5 Project 1Syguestbook A5 Jun 17, 2026 Jul 18, 2019 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 SyGuestBook A5 Version 1.2 has no CSRF protection mechanism, as demonstrated by CSRF for an index.php?c=Administrator&a=update admin password change. |
1Syguestbook A5 Project 1Syguestbook A5 Jun 17, 2026 Jul 18, 2019 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 SyGuestBook A5 Version 1.2 allows stored XSS because the isValidData function in include/functions.php does not properly block XSS payloads, as demonstrated by a crafted use of the onerror attribute of an IMG element. |