https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2007-1625.htmlhttps://patchthecve.com/cve/CVE-2007-1625.htmlTue, 16 Jun 2026 22:37:59 +0000MEDIUM 4.3: Cross-site scripting (XSS) vulnerability in save_entry.php in realGuestbook 5.01 allows remote attackers to inject arbitrary web script or HTML via the homepage parameter, as reachable through add_entry.php. NOTE: the original report stated that the vulnerability was in add_entry.php, which does nohttps://patchthecve.com/cve/CVE-2007-1624.htmlhttps://patchthecve.com/cve/CVE-2007-1624.htmlTue, 16 Jun 2026 22:37:58 +0000HIGH 7.5: Multiple SQL injection vulnerabilities in realGuestbook 5.01 allow remote attackers to execute arbitrary SQL commands via the (1) name, (2) email, (3) homepage, and (4) text parameters to save_entry.php, as reachable through add_entry.php; and possibly other unspecified parameters and files. NOTE: https://patchthecve.com/cve/CVE-2007-1623.htmlhttps://patchthecve.com/cve/CVE-2007-1623.htmlTue, 16 Jun 2026 22:37:58 +0000MEDIUM 4.3: Multiple cross-site scripting (XSS) vulnerabilities in realGuestbook 5.01, when register_globals is enabled, allow remote attackers to inject arbitrary web script or HTML via the (1) bg_color_1, (2) fs_menu, (3) fc_menu, (4) ff_menu, (5) bg_color_2, (6) fs_normal, (7) fc_normal, and (8) ff_normal pa