← Back

Phptoys

phptoys

2 CVEs • 2 products

Products (2)

Click to collapse
Toggle
Micro Guestbook
micro_guestbook
1 CVE
Micro Login System
micro_login_system
1 CVE

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2007-5787
1Phptoys
1Micro Login System
Apr 23, 2026
Nov 1, 2007
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Micro Login System 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a file containing a password via a direct request for userpwd.txt.
CVE-2006-3852
1Phptoys
1Micro Guestbook
Apr 16, 2026
Jul 25, 2006
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Cross-site scripting (XSS) vulnerability in index.php in Micro GuestBook allows remote attackers to execute arbitrary SQL commands via the (1) name or (2) comment ("text") fields.