Vendor
SyGuestBook
Products
2
CVEs
3
Across products
3
Status
Private
Products
2- 3 CVEs
- 0 CVEs
Recent CVEs
3| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2019-13949 | Hig | 0.57 | 8.8 | 0.01 | Jul 18, 2019 | SyGuestBook A5 Version 1.2 has no CSRF protection mechanism, as demonstrated by CSRF for an index.php?c=Administrator&a=update admin password change. | ||
| CVE-2019-13950 | Med | 0.35 | 5.4 | 0.01 | Jul 18, 2019 | index.php?c=admin&a=index in SyGuestBook A5 Version 1.2 has stored XSS via a reply to a comment. | ||
| CVE-2019-13948 | Med | 0.35 | 5.4 | 0.01 | Jul 18, 2019 | SyGuestBook A5 Version 1.2 allows stored XSS because the isValidData function in include/functions.php does not properly block XSS payloads, as demonstrated by a crafted use of the onerror attribute of an IMG element. |
- risk 0.57cvss 8.8epss 0.01
SyGuestBook A5 Version 1.2 has no CSRF protection mechanism, as demonstrated by CSRF for an index.php?c=Administrator&a=update admin password change.
- risk 0.35cvss 5.4epss 0.01
index.php?c=admin&a=index in SyGuestBook A5 Version 1.2 has stored XSS via a reply to a comment.
- risk 0.35cvss 5.4epss 0.01
SyGuestBook A5 Version 1.2 allows stored XSS because the isValidData function in include/functions.php does not properly block XSS payloads, as demonstrated by a crafted use of the onerror attribute of an IMG element.