PHP remote file inclusion vulnerability in authenticate.php in Keep It Simple Guest Book (KISGB), when executing PHP through CGI, allows remote attackers to execute arbitrary PHP code via a URL in the default_path_to_themes parameter.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Keep_it_simple_guest_book | Keep_it_simple_guest_book | * | 5.1.1 (including) |
| Keep_it_simple_guest_book | Keep_it_simple_guest_book | 5.0 (including) | 5.0 (including) |
References
- http://secunia.com/advisories/23477
- http://www.securityfocus.com/bid/21721
- http://www.vupen.com/english/advisories/2006/5147
- https://www.exploit-db.com/exploits/2979
- http://secunia.com/advisories/23477
- http://www.securityfocus.com/bid/21721
- http://www.vupen.com/english/advisories/2006/5147
- https://www.exploit-db.com/exploits/2979