20020421 Philip Chinery's Guestbook 1.1 fails to filter out js/htmlmailing list
http://archives.neohapsis.com/archives/bugtraq/2002-04/0309.html CVE-2002-0730
Philip Chinery's Guestbook 1.1 - Script Injection
Record summary
CVE-2002-0730 has a selected CVSS score of 7.5; EIP currently links 1 catalogued exploit.
Description
Cross-site scripting vulnerability in guestbook.pl for Philip Chinery's Guestbook 1.1 allows remote attackers to execute Javascript or HTML via fields such as (1) Name, (2) EMail, or (3) Homepage.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBPhilip Chinery's Guestbook 1.1 - Script InjectionExploitDB exploitby markus arndtNot analyzed1 file
References
4guestbook-pl-css(8916)vdb entry
http://www.iss.net/security_center/static/8916.php 4566vdb entry
http://www.securityfocus.com/bid/4566 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2002-0730