VulnerabilityModified
CVE-2006-6764
PHP remote file inclusion vulnerability in authenticate.php in Keep It Simple Guest Book (KISGB), when executing PHP through CGI, allows remote attackers to execute arbitrary PHP code via a URL in the default_path_to_themes parameter.
MEDIUM 6.8EPSS 2.05%
Does this matter?
Lower severity and a low EPSS score (2.05%). Track it; it rarely justifies an emergency change on its own.
Description
PHP remote file inclusion vulnerability in authenticate.php in Keep It Simple Guest Book (KISGB), when executing PHP through CGI, allows remote attackers to execute arbitrary PHP code via a URL in the default_path_to_themes parameter.
- CVSS 2.0
- 6.8 MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P
- EPSS
- 2.05% probability · 80th percentile
- CISA KEV
- Not listed
- Affected
- keep it simple guest book/keep it simple guest book
- Source
- cve@mitre.org
References
- http://secunia.com/advisories/23477Exploit, Vendor Advisory
- http://www.securityfocus.com/bid/21721
- http://www.vupen.com/english/advisories/2006/5147
- https://www.exploit-db.com/exploits/2979
- http://secunia.com/advisories/23477Exploit, Vendor Advisory
- http://www.securityfocus.com/bid/21721
- http://www.vupen.com/english/advisories/2006/5147
- https://www.exploit-db.com/exploits/2979
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.