CVE-2010-4884

Name of the Vulnerable Software and Affected Versions Gaestebuch version 1.2

Description The issue allows remote attackers to execute arbitrary PHP code via a URL in the script pfad parameter in the guestbook/gbook.php file.

Recommendations For Gaestebuch version 1.2, avoid using the script pfad parameter in the guestbook/gbook.php file until a fix is available. Consider restricting access to the guestbook/gbook.php file to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.