PT-2006-6481 · Unknown · Advanced Guestbook

Broken-Proxy

·

CVE-2006-5804

·

Published

2006-11-08

·

Updated

2024-08-07

CVSS v2.0

7.5

High

VectorAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions: Advanced Guestbook version 2.3.1
Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the include path parameter in the admin.php file.
Recommendations: For Advanced Guestbook version 2.3.1, consider restricting access to the admin.php file and avoid using the include path parameter until a patch is available.

Exploit

Fix

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Related Identifiers

CVE-2006-5804

Affected Products

Advanced Guestbook