GCVE - cpe:2.3:a:hinton_design:phphg_guestbook:1.2:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:hinton_design:phphg_guestbook:1.2:*:*:*:*:*:*:*

part: a version: 1.2 update: *

Vendor	Hinton Design (`a6c8afa9-2945-57de-b445-f2992024113b`)
Product	Phphg Guestbook (`b48366ae-b375-5aa1-8d45-ed5d99e411ec`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2006-0604`	vulnerable	2026-06-08 04:48:54.650394	Details available check.php in Hinton Design phphg Guestbook 1.2 does not check the user password when authenticating via cookies, which allows remote attackers to gain unauthorized access. Published: 2006-02-08T23:00:00.000Z Updated: 2024-08-07T16:41:28.800Z Open on db.gcve.eu Reference links http://www.vupen.com/english/advisories/2006/0480 http://www.securityfocus.com/bid/16541 http://securitytracker.com/id?1015620 http://secunia.com/advisories/18758 http://evuln.com/vulns/58/description.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-0603`	vulnerable	2026-06-08 04:48:54.650090	Details available Multiple cross-site scripting vulnerabilities in signed.php in Hinton Design phphg Guestbook 1.2 allow remote attackers to inject arbitrary web script or HTML via the (1) location, (2) website, or (3) message parameter. Published: 2006-02-08T23:00:00.000Z Updated: 2024-08-07T16:41:29.003Z Open on db.gcve.eu Reference links http://www.vupen.com/english/advisories/2006/0480 http://www.securityfocus.com/bid/16541 http://securitytracker.com/id?1015620 http://evuln.com/vulns/58/summary.html http://secunia.com/advisories/18758	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-0602`	vulnerable	2026-06-08 04:48:54.649666	Details available Multiple SQL injection vulnerabilities in Hinton Design phphg Guestbook 1.2 allow remote attackers to execute arbitrary SQL commands via the (1) username parameter to check.php or the id parameter to (2) admin/edit_smilie.php, (3) admin/add_theme.php, (4) admin/ban_ip.php, (5) admin/add_lang.php, or (6) admin/edit_filter.php. Published: 2006-02-08T23:00:00.000Z Updated: 2024-08-07T16:41:28.901Z Open on db.gcve.eu Reference links http://www.vupen.com/english/advisories/2006/0480 http://www.securityfocus.com/bid/16541 http://securitytracker.com/id?1015620 http://evuln.com/vulns/58/summary.html http://secunia.com/advisories/18758	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.