PatchTheCVEphphg guestbook vulnerabilities and fixes
Recent CVEs affecting phphg guestbook, with upgrade or downgrade steps. 3 tracked.
Also searched as: phphgguestbook.
phphg guestbook has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2006-02-08. Highest priority: CVE-2006-0602 (score 52/100).
- CVE-2006-0604 HIGH 7.5 DOWNGRADE check.php in Hinton Design phphg Guestbook 1.2 does not check the user password when authenticating via cookie
- CVE-2006-0603 MEDIUM 6.4 DOWNGRADE Multiple cross-site scripting vulnerabilities in signed.php in Hinton Design phphg Guestbook 1.2 allow remote
- CVE-2006-0602 HIGH 7.5 DOWNGRADE Multiple SQL injection vulnerabilities in Hinton Design phphg Guestbook 1.2 allow remote attackers to execute
FAQ
How do I fix phphg guestbook vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is phphg guestbook being exploited right now?
None of the tracked phphg guestbook CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which phphg guestbook CVE should I patch first?
CVE-2006-0602 currently ranks highest (52/100): Multiple SQL injection vulnerabilities in Hinton Design phphg Guestbook 1.2 allow remote attackers to execute .