Filtered by vendor Abczone.it Subscriptions
Filtered by product Wwwguestbook Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2004-2428 1 Abczone.it 1 Wwwguestbook 2024-08-08 N/A
Abczone.it WWWguestbook 1.1 stores db/dbase.mdb under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information such as the plaintext username and password.
CVE-2005-1429 1 Abczone.it 1 Wwwguestbook 2024-08-07 N/A
SQL injection vulnerability in login.asp in WWWguestbook 1.1 allows remote attackers to execute arbitrary SQL commands via the password parameter.