| Package | Affected versions | Patched versions |
|---|---|---|
| kvguestbook | = 1.0_beta |
The dologin function in guestbook.php in KvGuestbook 1.0 Beta allows remote attackers to gain administrative privileges, probably via modified $mysql['pass'] and $gbpass variables.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free