PatchTheCVEcreative guestbook vulnerabilities and fixes
Recent CVEs affecting creative guestbook, with upgrade or downgrade steps. 2 tracked.
Also searched as: creativeguestbook.
creative guestbook has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2007-03-16. Highest priority: CVE-2007-1480 (score 52/100).
- CVE-2007-1480 HIGH 7.5 DOWNGRADE Creative Guestbook 1.0 allows remote attackers to add an administrative account via a direct request to create
- CVE-2007-1479 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in Guestbook.php in Creative Guestbook 1.0 allows remote attackers to
FAQ
How do I fix creative guestbook vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is creative guestbook being exploited right now?
None of the tracked creative guestbook CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which creative guestbook CVE should I patch first?
CVE-2007-1480 currently ranks highest (52/100): Creative Guestbook 1.0 allows remote attackers to add an administrative account via a direct request to create.