Description
ASPjar Guestbook 1.00 allows remote attackers to delete arbitrary messages accessing the delete.asp administrative script with certain cookie values set to "true".
Metrics
CVSS 2.0 5.0/10
AV:N/AC:L/Au:N/C:N/I:P/A:NAffected software
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
References
- http://online.securityfocus.com/archive/82/270970
- http://www.ifrance.com/kitetoua/tuto/5holes4.txtVendor Advisory
- http://www.securityfocus.com/bid/4671
- https://exchange.xforce.ibmcloud.com/vulnerabilities/9006
- http://online.securityfocus.com/archive/82/270970
- http://www.ifrance.com/kitetoua/tuto/5holes4.txtVendor Advisory
- http://www.securityfocus.com/bid/4671
- https://exchange.xforce.ibmcloud.com/vulnerabilities/9006
Timeline
- Published
- Dec 31, 2002
- Last modified
- Jun 16, 2026
- NVD status
- Modified