PT-2007-2873 · Creative · Creative Guestbook

Dj7Xpl · Published 2007-03-16 · Updated 2017-10-11 · CVE-2007-1479

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Creative Guestbook version 1.0

Description A cross-site scripting (XSS) issue exists, allowing remote attackers to inject arbitrary web script or HTML via an unspecified parameter in the Guestbook.php file.

Recommendations For Creative Guestbook version 1.0, update the Guestbook.php file to validate and sanitize user input to prevent the injection of malicious scripts or HTML.

Exploit

Fix

Related Identifiers

CVE-2007-1479

Affected Products

Creative Guestbook

References · 5

• 🔥 https://exploit-db.com/exploits/3489 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2007-1479 · Security Note
• http://secunia.com/advisories/24536 · Note
• http://osvdb.org/34233 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/33015 · Note