← Back

Zenas

zenas

5 CVEs • 4 products

Products (4)

Click to collapse
Toggle
Paolink
paolink
2 CVEs
Pao Bacheca Guestbook
pao-bacheca_guestbook
1 CVE
Paoliber
paoliber
1 CVE
Paobacheca Guestbook
paobacheca_guestbook
1 CVE

CVEs (5)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2009-3493
1Zenas
1Paobacheca Guestbook
Apr 23, 2026
Sep 30, 2009
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Multiple cross-site scripting (XSS) vulnerabilities in Zenas PaoBacheca Guestbook 2.1 allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1) scrivi.php and (2) index.php.
CVE-2009-3423
1Zenas
1Paolink
Apr 23, 2026
Sep 25, 2009
N/A· v4
N/A· v3
6.8 MEDIUM· v2
login.php in Zenas PaoLink 1.0, when register_globals is enabled, allows remote attackers to bypass authentication and gain administrative access by setting the login_ok parameter to 1.
CVE-2009-3422
1Zenas
1Paoliber
Apr 23, 2026
Sep 25, 2009
N/A· v4
N/A· v3
6.8 MEDIUM· v2
login.php in Zenas PaoLiber 1.1, when register_globals is enabled, allows remote attackers to bypass authentication and gain administrative access by setting the login_ok parameter to 1.
CVE-2009-3421
1Zenas
1Pao Bacheca Guestbook
Apr 23, 2026
Sep 25, 2009
N/A· v4
9.8 CRITICAL· v3
6.8 MEDIUM· v2
login.php in Zenas PaoBacheca Guestbook 2.1, when register_globals is enabled, allows remote attackers to bypass authentication and gain administrative access by setting the login_ok parameter to 1.
CVE-2009-3320
1Zenas
1Paolink
Apr 23, 2026
Sep 23, 2009
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Cross-site scripting (XSS) vulnerability in scrivi.php in Zenas PaoLink (aka Pao-Link) 1.0 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO.