Vulnerability Details CVE-2012-5299
Mavili Guestbook, as released in November 2007, allows remote attackers to edit, delete, and approve arbitrary messages via a direct request to (1) edit.asp, (2) delete.asp, or (3) approve.asp.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.006
EPSS Ranking 68.3%
CVSS Severity
CVSS v2 Score 7.5
References
- http://archives.neohapsis.com/archives/bugtraq/2012-01/0010.html
- http://code.google.com/p/maviliguestbook/issues/detail?id=1
- http://www.securityfocus.com/bid/51252
- https://exchange.xforce.ibmcloud.com/vulnerabilities/72099
- http://archives.neohapsis.com/archives/bugtraq/2012-01/0010.html
- http://code.google.com/p/maviliguestbook/issues/detail?id=1
- http://www.securityfocus.com/bid/51252
- https://exchange.xforce.ibmcloud.com/vulnerabilities/72099
Products affected by CVE-2012-5299
-
cpe:2.3:a:mavili_guestbook_project:mavili_guestbook:-