Filtered by vendor Zenas Subscriptions
Total 5 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2009-3493 1 Zenas 1 Paobacheca Guestbook 2024-08-07 N/A
Multiple cross-site scripting (XSS) vulnerabilities in Zenas PaoBacheca Guestbook 2.1 allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1) scrivi.php and (2) index.php.
CVE-2009-3421 1 Zenas 1 Pao-bacheca Guestbook 2024-08-07 9.8 Critical
login.php in Zenas PaoBacheca Guestbook 2.1, when register_globals is enabled, allows remote attackers to bypass authentication and gain administrative access by setting the login_ok parameter to 1.
CVE-2009-3423 1 Zenas 1 Paolink 2024-08-07 N/A
login.php in Zenas PaoLink 1.0, when register_globals is enabled, allows remote attackers to bypass authentication and gain administrative access by setting the login_ok parameter to 1.
CVE-2009-3422 1 Zenas 1 Paoliber 2024-08-07 N/A
login.php in Zenas PaoLiber 1.1, when register_globals is enabled, allows remote attackers to bypass authentication and gain administrative access by setting the login_ok parameter to 1.
CVE-2009-3320 1 Zenas 1 Paolink 2024-08-07 N/A
Cross-site scripting (XSS) vulnerability in scrivi.php in Zenas PaoLink (aka Pao-Link) 1.0 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO.