VYPR

Guest Book

by Hiox India

CVEs (2)

  • CVE-2007-1998Apr 12, 2007
    risk 0.04cvss epss 0.07

    Direct static code injection vulnerability in HIOX Guest Book (HGB) 4.0 allows remote attackers to inject arbitrary PHP code via the Email field, which results in code execution through a direct request to gb.php.

  • CVE-2006-2515May 22, 2006
    risk 0.00cvss epss 0.02

    Cross-site scripting (XSS) vulnerability in index.php in Hiox Guestbook 3.1 allows remote attackers to inject arbitrary web script or HTML via the input forms for signing the guestbook.