The dologin function in guestbook.php in KvGuestbook 1.0 Beta allows remote attackers to gain administrative privileges, probably via modified $mysql[pass] and $gbpass variables.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Kvguestbook | Kvguestbook | 1.0_beta (including) | 1.0_beta (including) |