DBGuestBook dbs_base_path Parameter Multiple Vulnerabilities (CVE-2007-1165)

Multiple remote code execution vulnerabilities exists in DBGuestBook. These vulnerabilities are caused due to improper handling of crafted URL using the dbsbasepath parameter. A remote attacker can exploit these vulnerabilities to execute arbitrary code on the vulnerable Web server...

CVE-2007-1165

Multiple PHP remote file inclusion vulnerabilities in DBGuestbook 1.1 allow remote attackers to execute arbitrary PHP code via a URL in the dbsbasepath parameter to 1 utils.php, 2 guestbook.php, or 3 views.php in includes/...