medium6.8Public exploit code
CVE-2006-6764
PHP remote file inclusion vulnerability in authenticate.php in Keep It Simple Guest Book (KISGB), when executing PHP through CGI, allows remote attackers to ex…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- KISGB 5.1.1 - 'Authenticate.php' Remote File Inclusion2006-12-22 · webapps · php · Verified
Impact
PHP remote file inclusion vulnerability in authenticate.php in Keep It Simple Guest Book (KISGB), when executing PHP through CGI, allows remote attackers to execute arbitrary PHP code via a URL in the default_path_to_themes parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Keep It Simple Guest Book | Keep It Simple Guest Book | through 5.1.1 Version 5.0 |
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/23477
- http://www.securityfocus.com/bid/21721
- http://www.vupen.com/english/advisories/2006/5147
- https://www.exploit-db.com/exploits/2979
- http://secunia.com/advisories/23477
- http://www.securityfocus.com/bid/21721
- http://www.vupen.com/english/advisories/2006/5147
- https://www.exploit-db.com/exploits/2979