Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 09/05/2007 Updated: 16/10/2018

CVSS v2 Base Score: 7.1 | Impact Score: 6.9 | Exploitability Score: 8.6

VMScore: 632

Vector: AV:N/AC:M/Au:N/C:C/I:N/A:N

Advanced Guestbook 2.4.2 allows remote malicious users to obtain sensitive information via an invalid (1) GB_TBL parameter to (a) lang/codes-english.php or (b) image.php, which reveal the database name; (2) an invalid GB_DB parameter to index.php, coupled with a ../index lang cookie, which reveals the installation path; or (3) a direct request to index.php with no parameters or cookies, which reveals the installation path.

Vulnerable Product	Search on Vulmon	Subscribe to Product
advanced guestbook advanced guestbook 2.4.2

NVD-CWE-Other http://www.netvigilance.com/advisory0011 http://www.osvdb.org/33876 http://www.osvdb.org/33878 http://www.osvdb.org/33879 http://secunia.com/advisories/25153 http://securityreason.com/securityalert/2661 http://www.vupen.com/english/advisories/2007/1726 http://osvdb.org/34362 https://exchange.xforce.ibmcloud.com/vulnerabilities/34161 http://www.securityfocus.com/archive/1/467940/100/0/threaded https://nvd.nist.gov

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2007-0608

Vulnerability Summary

References

Vulmon Search

About

Products

Connect