Esoftpro

esoftpro

9 CVEs • 3 products

Products (3)

Click to collapse

Toggle

Online Guestbook Pro

online_guestbook_pro

Online Contact Manager

online_contact_manager

Online Photo Pro

online_photo_pro

CVEs (9)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2010-5001 1Esoftpro 1Online Contact Manager Apr 29, 2026 Nov 1, 2011 N/A· v4 N/A· v3 7.5 HIGH· v2 SQL injection vulnerability in view.php in esoftpro Online Contact Manager 3.0 allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVE-2010-4999 1Esoftpro 1Online Photo Pro Apr 29, 2026 Nov 1, 2011 N/A· v4 N/A· v3 7.5 HIGH· v2 SQL injection vulnerability in index.php in esoftpro Online Photo Pro 2.0 allows remote attackers to execute arbitrary SQL commands via the section parameter.
CVE-2010-4996 1Esoftpro 1Online Guestbook Pro Apr 29, 2026 Nov 1, 2011 N/A· v4 N/A· v3 7.5 HIGH· v2 SQL injection vulnerability in ogp_show.php in esoftpro Online Guestbook Pro 5.1 allows remote attackers to execute arbitrary SQL commands via the search parameter.
CVE-2009-4935 1Esoftpro 1Online Guestbook Pro Apr 29, 2026 Jul 12, 2010 N/A· v4 N/A· v3 7.5 HIGH· v2 SQL injection vulnerability in ogp_show.php in Online Guestbook Pro allows remote attackers to execute arbitrary SQL commands via the display parameter.
CVE-2009-4934 1Esoftpro 1Online Photo Pro Apr 29, 2026 Jul 12, 2010 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Cross-site scripting (XSS) vulnerability in index.php in Online Photo Pro 2.0 allows remote attackers to inject arbitrary web script or HTML via the section parameter.
CVE-2009-4926 1Esoftpro 1Online Contact Manager Apr 29, 2026 Jul 12, 2010 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Multiple cross-site scripting (XSS) vulnerabilities in Online Contact Manager (formerly EContact PRO) 3.0 allow remote attackers to inject arbitrary web script or HTML via the (1) showGroup parameter to (a) index.php and...Show more Multiple cross-site scripting (XSS) vulnerabilities in Online Contact Manager (formerly EContact PRO) 3.0 allow remote attackers to inject arbitrary web script or HTML via the (1) showGroup parameter to (a) index.php and the (2) id parameter to (b) view.php, (c) email.php, (d) edit.php, and (e) delete.php.Show less
CVE-2009-2448 1Esoftpro 1Online Guestbook Pro Apr 23, 2026 Jul 13, 2009 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Cross-site scripting (XSS) vulnerability in ogp_show.php in Online Guestbook Pro 5.1 allows remote attackers to inject arbitrary web script or HTML via the search_choice parameter. NOTE: the provenance of this informati...Show more Cross-site scripting (XSS) vulnerability in ogp_show.php in Online Guestbook Pro 5.1 allows remote attackers to inject arbitrary web script or HTML via the search_choice parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.Show less
CVE-2009-2447 1Esoftpro 1Online Guestbook Pro Apr 23, 2026 Jul 13, 2009 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Multiple cross-site scripting (XSS) vulnerabilities in ogp_show.php in Online Guestbook Pro 5.1 allow remote attackers to inject arbitrary web script or HTML via the (1) search or (2) display parameter.
CVE-2009-2441 1Esoftpro 1Online Guestbook Pro Apr 23, 2026 Jul 13, 2009 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Cross-site scripting (XSS) vulnerability in ogp_show.php in Online Guestbook Pro 5.1 allows remote attackers to inject arbitrary web script or HTML via the entry parameter.