Multiple cross-site scripting (XSS) vulnerabilities in guestbook.cgi in Lars Ellingsen Guestserver 4.13 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified message fields.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Guestserver | Lars_ellingsen | 2.07 (including) | 2.07 (including) |
| Guestserver | Lars_ellingsen | 2.10 (including) | 2.10 (including) |
| Guestserver | Lars_ellingsen | 2.90 (including) | 2.90 (including) |
| Guestserver | Lars_ellingsen | 3.01 (including) | 3.01 (including) |
| Guestserver | Lars_ellingsen | 3.02 (including) | 3.02 (including) |
| Guestserver | Lars_ellingsen | 3.03 (including) | 3.03 (including) |
| Guestserver | Lars_ellingsen | 3.10 (including) | 3.10 (including) |
| Guestserver | Lars_ellingsen | 3.20 (including) | 3.20 (including) |
| Guestserver | Lars_ellingsen | 3.21 (including) | 3.21 (including) |
| Guestserver | Lars_ellingsen | 3.22 (including) | 3.22 (including) |
| Guestserver | Lars_ellingsen | 3.30 (including) | 3.30 (including) |
| Guestserver | Lars_ellingsen | 3.31 (including) | 3.31 (including) |
| Guestserver | Lars_ellingsen | 3.32 (including) | 3.32 (including) |
| Guestserver | Lars_ellingsen | 3.33 (including) | 3.33 (including) |
| Guestserver | Lars_ellingsen | 3.34 (including) | 3.34 (including) |
| Guestserver | Lars_ellingsen | 3.35 (including) | 3.35 (including) |
| Guestserver | Lars_ellingsen | 3.36 (including) | 3.36 (including) |
| Guestserver | Lars_ellingsen | 3.40 (including) | 3.40 (including) |
| Guestserver | Lars_ellingsen | 3.41 (including) | 3.41 (including) |
| Guestserver | Lars_ellingsen | 3.42 (including) | 3.42 (including) |
| Guestserver | Lars_ellingsen | 3.43 (including) | 3.43 (including) |
| Guestserver | Lars_ellingsen | 3.44 (including) | 3.44 (including) |
| Guestserver | Lars_ellingsen | 3.45 (including) | 3.45 (including) |
| Guestserver | Lars_ellingsen | 3.46 (including) | 3.46 (including) |
| Guestserver | Lars_ellingsen | 3.47 (including) | 3.47 (including) |
| Guestserver | Lars_ellingsen | 3.48 (including) | 3.48 (including) |
| Guestserver | Lars_ellingsen | 3.60 (including) | 3.60 (including) |
| Guestserver | Lars_ellingsen | 3.62 (including) | 3.62 (including) |
| Guestserver | Lars_ellingsen | 3.65 (including) | 3.65 (including) |
| Guestserver | Lars_ellingsen | 3.66 (including) | 3.66 (including) |
| Guestserver | Lars_ellingsen | 3.80 (including) | 3.80 (including) |
| Guestserver | Lars_ellingsen | 3.81 (including) | 3.81 (including) |
| Guestserver | Lars_ellingsen | 3.82 (including) | 3.82 (including) |
| Guestserver | Lars_ellingsen | 3.83 (including) | 3.83 (including) |
| Guestserver | Lars_ellingsen | 4 (including) | 4 (including) |
| Guestserver | Lars_ellingsen | 4.01 (including) | 4.01 (including) |
| Guestserver | Lars_ellingsen | 4.05 (including) | 4.05 (including) |
| Guestserver | Lars_ellingsen | 4.06 (including) | 4.06 (including) |
| Guestserver | Lars_ellingsen | 4.07 (including) | 4.07 (including) |
| Guestserver | Lars_ellingsen | 4.08 (including) | 4.08 (including) |
| Guestserver | Lars_ellingsen | 4.09 (including) | 4.09 (including) |
| Guestserver | Lars_ellingsen | 4.10 (including) | 4.10 (including) |
| Guestserver | Lars_ellingsen | 4.13 (including) | 4.13 (including) |