PatchTheCVE: martin bauerhttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2005-4727: Cross-site scripting (XSS) vulnerability in gbook.cgi in gBook before 1.0.2 allows remote attackers to inject https://patchthecve.com/cve/CVE-2005-4727.htmlhttps://patchthecve.com/cve/CVE-2005-4727.htmlTue, 16 Jun 2026 22:19:19 +0000MEDIUM 5.1: Cross-site scripting (XSS) vulnerability in gbook.cgi in gBook before 1.0.2 allows remote attackers to inject arbitrary web script or HTML via the User-Agent HTTP header field.CVE-2004-2352: Cross-site scripting (XSS) vulnerability in GBook for PHP-Nuke 1.0 allows remote attackers to inject arbitraryhttps://patchthecve.com/cve/CVE-2004-2352.htmlhttps://patchthecve.com/cve/CVE-2004-2352.htmlTue, 16 Jun 2026 22:09:29 +0000MEDIUM 4.3: Cross-site scripting (XSS) vulnerability in GBook for PHP-Nuke 1.0 allows remote attackers to inject arbitrary web script or HTML via cookies that are stored in the $_COOKIE PHP variable, which is not cleansed by PHP-Nuke.CVE-2004-2351: Cross-site scripting (XSS) vulnerability in GBook for Php-Nuke 1.0 allows remote attackers to inject arbitraryhttps://patchthecve.com/cve/CVE-2004-2351.htmlhttps://patchthecve.com/cve/CVE-2004-2351.htmlTue, 16 Jun 2026 22:09:29 +0000MEDIUM 4.3: Cross-site scripting (XSS) vulnerability in GBook for Php-Nuke 1.0 allows remote attackers to inject arbitrary web script or HTML via multiple parameters, including (1) name, (2) email, (3) city, and (4) message, which do not use the <script> and <style> tags, which are filtered by PHP-Nuke.CVE-2002-1560: index.php in gBook 1.4 allows remote attackers to bypass authentication and gain administrative privileges by https://patchthecve.com/cve/CVE-2002-1560.htmlhttps://patchthecve.com/cve/CVE-2002-1560.htmlTue, 16 Jun 2026 21:59:33 +0000HIGH 10.0: index.php in gBook 1.4 allows remote attackers to bypass authentication and gain administrative privileges by setting the login parameter to true.