CVEvulnerability
CVE-2005-2650
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2005-08-23
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
Description
Cross-site scripting (XSS) vulnerability in sign.asp in Emefa Guestbook 1.2 allows remote attackers to inject arbitrary web script or HTML via the (1) name, (2) location, and (3) email parameters.
Affected configurations
• emefa emefa guestbook 1.2
References
- http://packetstormsecurity.org/0508-advisories/emefaGuest.txt Vendor Advisory
- http://secunia.com/advisories/16489 Patch, Vendor Advisory
- http://systemsecure.org/ssforum/viewtopic.php?t=91 Vendor Advisory
- http://www.emefa.myserver.org/comp/guestview.php Patch
- http://www.securityfocus.com/bid/14599 www.securityfocus.com
- http://packetstormsecurity.org/0508-advisories/emefaGuest.txt Vendor Advisory
- http://secunia.com/advisories/16489 Patch, Vendor Advisory
- http://systemsecure.org/ssforum/viewtopic.php?t=91 Vendor Advisory
- http://www.emefa.myserver.org/comp/guestview.php Patch
- http://www.securityfocus.com/bid/14599 www.securityfocus.com