CVE-2006-5651

Name of the Vulnerable Software and Affected Versions: DigiOz Guestbook versions prior to 1.7.1

Description: The issue allows remote attackers to obtain sensitive information via a non-numeric page parameter in the list.php file. This is achieved by displaying the installation path in the resulting error message.

Recommendations: For versions prior to 1.7.1, update to version 1.7.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the list.php file to minimize the risk of exploitation.