CVE-2007-0608

Advanced Guestbook 2.4.2 contains information-disclosure vulnerabilities that reveal the database name and installation path. Specifically, the issues arise from: (1) GB_TBL param in lang/codes-english.php or image.php leaking the database name; (2) GB_DB param to index.php with a ../index lang c...