CVE-2007-0926

2007-02-1411:00:00

mitre

www.cve.org

7 High

AI Score

Confidence

Low

0.011 Low

EPSS

Percentile

84.4%

JSON

The dologin function in guestbook.php in KvGuestbook 1.0 Beta allows remote attackers to gain administrative privileges, probably via modified $mysql[‘pass’] and $gbpass variables.

References

osvdb.org/33710

securityreason.com/securityalert/2246

www.securityfocus.com/archive/1/459799/100/0/threaded