CVE-2007-2203 Cross-site scripting (XSS) vulnerability in Big Blue Guestbook allows remote attackers to inject arbitrary web script or HTML via the message field in the guestbook entry submission form.
MediumCVSS 4.3
EPSS 1.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in Big Blue Guestbook allows remote attackers to inject arbitrary web script or HTML via the message field in the guestbook entry submission form.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| big blue guestbook | All versions | No fix listed |
References
- 35313 vdb-entry
- 24997 third-party-advisory
- 20070423 Big Blue Guestbook HTML Injection Vulnerabilities mailing-list
- 23591 vdb-entry
- ADV-2007-1518 vdb-entry