Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2019-13949

SyGuestBook A5 Version 1.2 has no CSRF protection mechanism, as demonstrated by CSRF for an index.php?c=Administrator&a=update admin password change.

CVSS 3.0 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Syguestbook A5 Project
Products
Syguestbook A5
CVE-2019-13948

SyGuestBook A5 Version 1.2 allows stored XSS because the isValidData function in include/functions.php does not properly block XSS payloads, as demonstrated by a crafted use of the onerror attribute of an IMG element.

CVSS 3.0 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Syguestbook A5 Project
Products
Syguestbook A5