CVE-2007-0926

The dologin function in guestbook.php in KvGuestbook 1.0 Beta allows remote attackers to gain administrative privileges, probably via modified $mysql'pass' and $gbpass variables...

Design/Logic Flaw

The dologin function in guestbook.php in KvGuestbook 1.0 Beta allows remote attackers to gain administrative privileges, probably via modified $mysql'pass' and $gbpass variables...

CVE-2007-0926

The CVE-2007-0926 issue affects KvGuestbook 1.0 Beta, specifically the dologin function in guestbook.php. The vulnerability allows remote attackers to gain administrative privileges, probably by manipulating the $mysql['pass'] and $gbpass variables. The available sources confirm the affected comp...

CVE-2007-0926

The dologin function in guestbook.php in KvGuestbook 1.0 Beta allows remote attackers to gain administrative privileges, probably via modified $mysql'pass' and $gbpass variables...

KvGuestbook Remote Add Admin Exploit

Version : 1.0 Beta Download : http://www.killervault.com Files : guestbook.php Error : function dologin global $mysql, $gbpass, $gburl; $time = time + 86400365; if$gbpass == $mysql'pass' setcookie'kvgbcookie', $mysql'pass', $time, '/'; header"Location: $gburl"; $mysql, $gbpass, $gburl Mysql & Adm...