CVE-2008-7140

Multiple cross-site scripting (XSS) vulnerabilities in @lex Guestbook 4.0.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) language_setup parameter to setup.php or (2) test parameter to index.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. NOTE: a third party has been reported that the test parameter is not used in @lex Guestbook.

• CWE-79

• http://downloads.securityfocus.com/vulnerabilities/exploits/28519.htmlExploit
• http://www.juniper.net/security/auto/vulnerabilities/vuln28519.html
• http://www.securityfocus.com/bid/28519Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41566
• http://downloads.securityfocus.com/vulnerabilities/exploits/28519.htmlExploit
• http://www.juniper.net/security/auto/vulnerabilities/vuln28519.html
• http://www.securityfocus.com/bid/28519Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41566

Published

Sep 1, 2009

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2008-7134Multiple cross-site scripting (XSS) vulnerabilities in the d…
• CVE-2008-7135toolbaru.dll in ICQ Toolbar (ICQToolbar) 2.3 allows remote a…
• CVE-2008-7136toolbaru.dll in ICQ Toolbar (ICQToolbar) 2.3 allows remote a…
• CVE-2008-7137WS-Proxy in Eye-Fi 1.1.2 allows remote attackers to cause a …
• CVE-2008-7138The Manager in Eye-Fi 1.1.2 generates predictable snonce val…
• CVE-2008-7139Multiple cross-site request forgery (CSRF) vulnerabilities i…
• CVE-2008-7141Cross-site scripting (XSS) vulnerability in setup.php in @le…
• CVE-2008-7142Absolute path traversal vulnerability in the Disk Usage modu…
• CVE-2008-7143phpBB 2.0.23 includes the session ID in a request to modcp.p…
• CVE-2008-7144Multiple unspecified vulnerabilities in RARLAB WinRAR before…
• CVE-2008-7145Multiple SQL injection vulnerabilities in index.php in Coron…
• CVE-2008-7146IntraLearn Software IntraLearn 2.1, and possibly other versi…