Description
Cross-site scripting vulnerability in guestbook.pl for Philip Chinery's Guestbook 1.1 allows remote attackers to execute Javascript or HTML via fields such as (1) Name, (2) EMail, or (3) Homepage.
Metrics
CVSS 2.0 7.5/10
AV:N/AC:L/Au:N/C:P/I:P/A:PAffected software
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
References
- http://archives.neohapsis.com/archives/bugtraq/2002-04/0309.htmlExploit, Vendor Advisory
- http://www.iss.net/security_center/static/8916.phpVendor Advisory
- http://www.securityfocus.com/bid/4566Exploit, Vendor Advisory
- http://archives.neohapsis.com/archives/bugtraq/2002-04/0309.htmlExploit, Vendor Advisory
- http://www.iss.net/security_center/static/8916.phpVendor Advisory
- http://www.securityfocus.com/bid/4566Exploit, Vendor Advisory
Timeline
- Published
- Aug 12, 2002
- Last modified
- Jun 16, 2026
- NVD status
- Modified