PatchTheCVEgbook vulnerabilities and fixes
Recent CVEs affecting gbook, with upgrade or downgrade steps. 7 tracked.
gbook has 7 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2011-09-12. Highest priority: CVE-2002-1560 (score 64/100).
- CVE-2009-5095 MEDIUM 6.8 DOWNGRADE PHP remote file inclusion vulnerability in index_inc.php in ea gBook 0.1 and 0.1.4 allows remote attackers to
- CVE-2009-2592 HIGH 7.5 DOWNGRADE SQL injection vulnerability in guestbook.php in PHPJunkYard GBook 1.6 allows remote attackers to execute arbit
- CVE-2009-0464 MEDIUM 5.1 DOWNGRADE PHP remote file inclusion vulnerability in includes/header.php in Groone GBook 2.0 allows remote attackers to
- CVE-2005-4727 MEDIUM 5.1 DOWNGRADE Cross-site scripting (XSS) vulnerability in gbook.cgi in gBook before 1.0.2 allows remote attackers to inject
- CVE-2004-2352 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in GBook for PHP-Nuke 1.0 allows remote attackers to inject arbitrary
- CVE-2004-2351 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in GBook for Php-Nuke 1.0 allows remote attackers to inject arbitrary
- CVE-2002-1560 HIGH 10.0 DOWNGRADE index.php in gBook 1.4 allows remote attackers to bypass authentication and gain administrative privileges by
FAQ
How do I fix gbook vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is gbook being exploited right now?
None of the tracked gbook CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which gbook CVE should I patch first?
CVE-2002-1560 currently ranks highest (64/100): index.php in gBook 1.4 allows remote attackers to bypass authentication and gain administrative privileges by .