Approved changes feed: RSS · Atom

cpe:2.3:a:michael_salzer:guestbox:0.6:*:*:*:*:*:*:*

part: a version: 0.6 update: *

VendorMichael Salzer (5be0e6ee-8fea-5408-a950-e0ffb070e886)
ProductGuestbox (e7bad82a-d62c-5224-bf31-3bcc81940720)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2006-0861 vulnerable 2026-06-08 04:48:55.540057 Details available
Michael Salzer Guestbox 0.6, and other versions before 0.8, allows remote attackers to obtain the source IP addresses of guestbook entries via a direct request to /gb/gblog.
Published: 2006-02-23T23:00:00.000Z
Updated: 2024-08-07T16:48:56.569Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-0860 vulnerable 2026-06-08 04:48:55.539738 Details available
Multiple cross-site scripting (XSS) vulnerabilities in Michael Salzer Guestbox 0.6, and other versions before 0.8, allow remote attackers to inject arbitrary web script or HTML via (1) HTML tags that follow a "http://" string, which bypasses a regular expression check, and (2) other unspecified attack vectors.
Published: 2006-02-23T23:00:00.000Z
Updated: 2024-08-07T16:48:56.945Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-0859 vulnerable 2026-06-08 04:48:55.539359 Details available
Michael Salzer Guestbox 0.6, and other versions before 0.8, allows remote attackers to post an admin comment to a guestbook entry via a certain modified form, possibly related to the nummer parameter.
Published: 2006-02-23T23:00:00.000Z
Updated: 2024-08-07T16:48:56.885Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.