Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2008-7006

Free PHP VX Guestbook 1.06 allows remote attackers to bypass authentication and download a backup of the database via a direct request to admin/backupdb.php.

CVSS 2.0 · 5.0 Medium EPSS 6.6% KEV · Not listed
Vendors
Phpversion
Products
Php Vx Guestbook
CVE-2008-7007

Free PHP VX Guestbook 1.06 allows remote attackers to bypass authentication and gain administrative access by setting the (1) admin_name and (2) admin_pass cookie values to 1.

CVSS 2.0 · 7.5 High EPSS 2.6% KEV · Not listed
Vendors
Phpversion
Products
Php Vx Guestbook
CVE-2025-57263

An authenticated SQL injection vulnerability in VX Guestbook 1.07 allows attackers with admin access to inject malicious SQL payloads via the "word" POST parameter in the words.php admin panel.

CVSS 3.1 · 7.2 High EPSS < 1% KEV · Not listed
Vendors
Phpversion
Products
Vx Guestbook