PatchTheCVE: gbookhttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2009-5095: PHP remote file inclusion vulnerability in index_inc.php in ea gBook 0.1 and 0.1.4 allows remote attackers to https://patchthecve.com/cve/CVE-2009-5095.htmlhttps://patchthecve.com/cve/CVE-2009-5095.htmlTue, 16 Jun 2026 23:15:00 +0000MEDIUM 6.8: PHP remote file inclusion vulnerability in index_inc.php in ea gBook 0.1 and 0.1.4 allows remote attackers to execute arbitrary PHP code via a URL in the inc_ordner parameter.CVE-2009-2592: SQL injection vulnerability in guestbook.php in PHPJunkYard GBook 1.6 allows remote attackers to execute arbithttps://patchthecve.com/cve/CVE-2009-2592.htmlhttps://patchthecve.com/cve/CVE-2009-2592.htmlTue, 16 Jun 2026 23:09:46 +0000HIGH 7.5: SQL injection vulnerability in guestbook.php in PHPJunkYard GBook 1.6 allows remote attackers to execute arbitrary SQL commands via the mes_id parameter.CVE-2009-0464: PHP remote file inclusion vulnerability in includes/header.php in Groone GBook 2.0 allows remote attackers to https://patchthecve.com/cve/CVE-2009-0464.htmlhttps://patchthecve.com/cve/CVE-2009-0464.htmlTue, 16 Jun 2026 23:05:05 +0000MEDIUM 5.1: PHP remote file inclusion vulnerability in includes/header.php in Groone GBook 2.0 allows remote attackers to execute arbitrary PHP code via a URL in the abspath parameter.CVE-2005-4727: Cross-site scripting (XSS) vulnerability in gbook.cgi in gBook before 1.0.2 allows remote attackers to inject https://patchthecve.com/cve/CVE-2005-4727.htmlhttps://patchthecve.com/cve/CVE-2005-4727.htmlTue, 16 Jun 2026 22:19:19 +0000MEDIUM 5.1: Cross-site scripting (XSS) vulnerability in gbook.cgi in gBook before 1.0.2 allows remote attackers to inject arbitrary web script or HTML via the User-Agent HTTP header field.CVE-2004-2352: Cross-site scripting (XSS) vulnerability in GBook for PHP-Nuke 1.0 allows remote attackers to inject arbitraryhttps://patchthecve.com/cve/CVE-2004-2352.htmlhttps://patchthecve.com/cve/CVE-2004-2352.htmlTue, 16 Jun 2026 22:09:29 +0000MEDIUM 4.3: Cross-site scripting (XSS) vulnerability in GBook for PHP-Nuke 1.0 allows remote attackers to inject arbitrary web script or HTML via cookies that are stored in the $_COOKIE PHP variable, which is not cleansed by PHP-Nuke.CVE-2004-2351: Cross-site scripting (XSS) vulnerability in GBook for Php-Nuke 1.0 allows remote attackers to inject arbitraryhttps://patchthecve.com/cve/CVE-2004-2351.htmlhttps://patchthecve.com/cve/CVE-2004-2351.htmlTue, 16 Jun 2026 22:09:29 +0000MEDIUM 4.3: Cross-site scripting (XSS) vulnerability in GBook for Php-Nuke 1.0 allows remote attackers to inject arbitrary web script or HTML via multiple parameters, including (1) name, (2) email, (3) city, and (4) message, which do not use the <script> and <style> tags, which are filtered by PHP-Nuke.CVE-2002-1560: index.php in gBook 1.4 allows remote attackers to bypass authentication and gain administrative privileges by https://patchthecve.com/cve/CVE-2002-1560.htmlhttps://patchthecve.com/cve/CVE-2002-1560.htmlTue, 16 Jun 2026 21:59:33 +0000HIGH 10.0: index.php in gBook 1.4 allows remote attackers to bypass authentication and gain administrative privileges by setting the login parameter to true.