← Back

Htmljunction

htmljunction

2 CVEs • 2 products

Products (2)

Click to collapse
Toggle
Ezguestbook
ezguestbook
1 CVE
Ezhomepagepro
ezhomepagepro
1 CVE

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2006-1413
1Htmljunction
1Ezhomepagepro
Apr 16, 2026
Mar 28, 2006
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Multiple cross-site scripting (XSS) vulnerabilities in EZHomepagePro 1.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) adid or (2) aname parameter in (a) common/email.asp, (b) user...Show more
Multiple cross-site scripting (XSS) vulnerabilities in EZHomepagePro 1.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) adid or (2) aname parameter in (a) common/email.asp, (b) users/users_search.asp, or (c) users/users_profiles.asp; (3) page parameter in (d) users/users_calendar.asp; (4) usid parameter in (e) users/users_mgallery.asp; or (5) m parameter in (f) users/users_search.asp.Show less
CVE-2005-1660
1Htmljunction
1Ezguestbook
Apr 16, 2026
May 18, 2005
N/A· v4
N/A· v3
7.5 HIGH· v2
HTMLJunction EZGuestbook stores the guestbook.mdb file under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information such as the administrative password.