返回 CVE 瀏覽器

CVE-2002-0551

HIGH

7.5

CVSS Severity Score

EPSS Score0.1050%

EPSS Percentile17.84th

Published2002年7月3日

Last Modified2026年4月16日

Vulnerability Description

Cross-site scripting vulnerability in Dynamic Guestbook 3.0 allows remote attackers to execute code in clients who access guestbook pages via the parameters (1) name, (2) mail, or (3) kommentar.

Affected Platforms (CPE)

📦

Gcf

Dynamic Guestbook

= 3.0

References & Advisories

🔗 http://archives.neohapsis.com/archives/bugtraq/2002-04/0052.html

🔗 http://www.iss.net/security_center/static/8763.php

🔗 http://www.securityfocus.com/bid/4422

🔗 http://archives.neohapsis.com/archives/bugtraq/2002-04/0052.html

🔗 http://www.iss.net/security_center/static/8763.php

🔗 http://www.securityfocus.com/bid/4422

相關漏洞威脅

CVE-2007-148610.0

PHP remote file inclusion vulnerability in template.class.php in Carbonize Lazarus Guestbook before 1.7.3 allows remote attackers ...

CVE-2002-05507.5

Dynamic Guestbook 3.0 allows remote attackers to execute arbitrary code via shell metacharacters in the gbdaten parameter.

CVE-2006-21586.4

Dynamic variable evaluation vulnerability in index.php in Stadtaus Guestbook Script 1.7 and earlier, when register_globals is enab...

CVE-2026-121917.8

A vulnerability was found in Comma AI Openpilot 0.11. This issue affects the function pickle.load/pickle.loads of the file selfdri...