CVE-2010-0978

The CVE-2010-0978 entry affects KMSoft Guestbook (aka GBook) 1.0, where sensitive data is stored under the web root with insufficient access control. This allows remote attackers to directly download the database file (db/db.mdb), exposing stored information. The root cause is improper access con...

CVE-2010-4987

The CVE-2010-4987 issue affects KMSoft Guestbook (aka GBook), where a vulnerability in default.asp allows SQL injection through the p parameter. The underlying flaw enables remote attackers to execute arbitrary SQL commands, potentially impacting data confidentiality and integrity (described as P...