lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
Open Source and information security mailing list archives
| ||
|
Date: 11 Dec 2005 17:42:30 -0000 From: jaakko@...ke.fi To: bugtraq@...urityfocus.com Subject: Guestserver guestbook system vulnerabilities The poor security and input validation at Guestserver versions below 5 ( there are still lots of them out there ) allow all HTML tags inside a message and it can be exploited as much as you want to. http://www.stud.ntnu.no/~larsell/guestserver/ A Google Search for "Guestbook by Guestserver - v4.12" for example comes up with tons of vulnerable sites.