Vulnerability in Keep It Simple Guest Book
CVE-2006-6763
Multiple PHP remote file inclusion vulnerabilities in the Keep It Simple Guest Book (KISGB) allow remote attackers to execute arbitrary PHP code via a URL in the (1) path_to_themes parameter in (a) authenticate.php, and the (2) default_path_for_themes parameter in (b) admin.php and (c) upconfig.php.
EPSS: 0.021 (79.7th percentile) — read the EPSS interpretation.
Affected products
- Keep_it_simple_guest_book — versions 5.0
- N/a — versions n/a
References
- cve@mitre.org (Exploit, x_refsource_MISC)
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)