7.5
CVE-2006-4122
- EPSS 3.11%
- Veröffentlicht 14.08.2006 23:04:00
- Zuletzt bearbeitet 16.06.2026 22:28:28
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginSimple one-file guestbook 1.0 and earlier allows remote attackers to bypass authentication and delete guestbook entries via a modified id parameter to guestbook.php.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Simple One-file Guestbook ≫ Simple One-file Guestbook Version <= 1.0
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 3.11% | 0.861 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.5 | 10 | 6.4 |
AV:N/AC:L/Au:N/C:P/I:P/A:P
|
http://it.security.netsons.org/exploit/simplegb.txt
http://secunia.com/advisories/21429
http://www.securityfocus.com/archive/1/442884/100/0/threaded
http://www.securityfocus.com/bid/19437
http://www.vupen.com/english/advisories/2006/3229
https://exchange.xforce.ibmcloud.com/vulnerabilities/28289