Visitorbook
Approved changes feed: RSS · Atom
cpe:2.3:a:freescripts:visitorbook:le:*:*:*:*:*:*:*
part: a version: le update: *
| Vendor | Freescripts (ac64e6b9-4fd5-59e0-b31d-8cb99fcfd5cb) |
|---|---|
| Product | Visitorbook (8f07ca6f-7b9f-56cc-9bcb-b179d7d4065e) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2003-0980 |
vulnerable | 2026-06-08 04:47:22.973547 |
Details available
Cross-site scripting (XSS) vulnerability in FreeScripts VisitorBook LE (visitorbook.pl) allows remote attackers to inject arbitrary HTML or web script via (1) the "do" parameter, (2) via the "user" parameter from a host with a malicious reverse DNS name, (3) via quote marks or ampersands in other parameters.
Published: 2003-12-11T05:00:00.000Z
Updated: 2024-08-08T02:12:35.855Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2003-0979 |
vulnerable | 2026-06-08 04:47:22.973168 |
Details available
FreeScripts VisitorBook LE (visitorbook.pl) does not properly escape line breaks in input, which allows remote attackers to (1) use VisitorBook as an open mail relay, when $mailuser is 1, via extra headers in the email field, or (2) cause the guestbook database to be deleted via a large number of line breaks that exceeds the $max_posts variable.
Published: 2003-12-11T05:00:00.000Z
Updated: 2024-08-08T02:12:35.785Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.