5.1
CVSSv2

CVE-2006-4889

Published: 19/09/2006 Updated: 14/02/2024
CVSS v2 Base Score: 5.1 | Impact Score: 6.4 | Exploitability Score: 4.9
VMScore: 615
Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P

Vulnerability Summary

Multiple PHP remote file inclusion vulnerabilities in Telekorn SignKorn Guestbook (SL) 1.3 and previous versions, when register_globals is enabled, allow remote malicious users to execute arbitrary PHP code via a URL in the dir_path parameter in (1) index.php, (2) includes/functions.gb.php, (3) includes/functions.admin.php, (4) includes/admin.inc.php, (5) help.php, (6) smile.php, (7) entry.php; (8) adminhelp0.php, (9) adminhelp1.php, (10) adminhelp2.php, and (11) adminhelp3.php in (a) help/en and (b) help/de directories; and the (12) preview.php, (13) log.php, (14) index.php, (15) config.php, and (16) admin.php in the (c) admin directory, a different set of vectors than CVE-2006-4788.

Vulnerable Product Search on Vulmon Subscribe to Product

telekorn signkorn guestbook

telekorn signkorn guestbook 1.1

telekorn signkorn guestbook 1.2

Exploits

source: wwwsecurityfocuscom/bid/19977/info Telekorn Signkorn Guestbook is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data This may allow the attacker to compromise the application and the underlying system; other attacks are also possibl ...
source: wwwsecurityfocuscom/bid/19977/info Telekorn Signkorn Guestbook is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data This may allow the attacker to compromise the application and the underlying system; other attacks are also possible Versions ...
source: wwwsecurityfocuscom/bid/19977/info Telekorn Signkorn Guestbook is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data This may allow the attacker to compromise the application and the underlying system; other attacks are also possible Versions 13 and e ...
source: wwwsecurityfocuscom/bid/19977/info Telekorn Signkorn Guestbook is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data This may allow the attacker to compromise the application and the underlying system; other attacks are also possible ...
source: wwwsecurityfocuscom/bid/19977/info Telekorn Signkorn Guestbook is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data This may allow the attacker to compromise the application and the underlying system; other attacks are also possible Versions 13 an ...
source: wwwsecurityfocuscom/bid/19977/info Telekorn Signkorn Guestbook is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data This may allow the attacker to compromise the application and the underlying system; other attacks are also possible ...
source: wwwsecurityfocuscom/bid/19977/info Telekorn Signkorn Guestbook is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data This may allow the attacker to compromise the application and the underlying system; other attacks are also pos ...
source: wwwsecurityfocuscom/bid/19977/info Telekorn Signkorn Guestbook is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data This may allow the attacker to compromise the application and the underlying system; other attacks are also possible Versio ...
source: wwwsecurityfocuscom/bid/19977/info Telekorn Signkorn Guestbook is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data This may allow the attacker to compromise the application and the underlying system; other attacks are also possible ...
source: wwwsecurityfocuscom/bid/19977/info Telekorn Signkorn Guestbook is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data This may allow the attacker to compromise the application and the underlying system; other attacks are also possi ...
source: wwwsecurityfocuscom/bid/19977/info Telekorn Signkorn Guestbook is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data This may allow the attacker to compromise the application and the underlying system; other attacks are also possible Ver ...
#============================================================================================== #Signkorn Guestbook <= v13 (dir_path) Remote File Inclusion Exploit #=============================================================================================== # #Critical Lev ...
source: wwwsecurityfocuscom/bid/19977/info Telekorn Signkorn Guestbook is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data This may allow the attacker to compromise the application and the underlying system; other attacks are also possible ...
source: wwwsecurityfocuscom/bid/19977/info Telekorn Signkorn Guestbook is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data This may allow the attacker to compromise the application and the underlying system; other attacks are also possible Versions 13 and earlier ar ...
source: wwwsecurityfocuscom/bid/19977/info Telekorn Signkorn Guestbook is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data This may allow the attacker to compromise the application and the underlying system; other attacks are also possible Versions 13 ...
source: wwwsecurityfocuscom/bid/19977/info Telekorn Signkorn Guestbook is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data This may allow the attacker to compromise the application and the underlying system; other attacks are also possible ...
source: wwwsecurityfocuscom/bid/19977/info Telekorn Signkorn Guestbook is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data This may allow the attacker to compromise the application and the underlying system; other attacks are also possible ...
source: wwwsecurityfocuscom/bid/19977/info Telekorn Signkorn Guestbook is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data This may allow the attacker to compromise the application and the underlying system; other attacks are also possible Versions 13 and earlier are a ...
source: wwwsecurityfocuscom/bid/19977/info Telekorn Signkorn Guestbook is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data This may allow the attacker to compromise the application and the underlying system; other attacks are also possible ...
source: wwwsecurityfocuscom/bid/19977/info Telekorn Signkorn Guestbook is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data This may allow the attacker to compromise the application and the underlying system; other attacks are also possible Versions 13 and earl ...
source: wwwsecurityfocuscom/bid/19977/info Telekorn Signkorn Guestbook is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data This may allow the attacker to compromise the application and the underlying system; other attacks are also possible Versions 13 and earlier ...