Lucene search

K
seebugRootSSV:81932
HistoryJul 01, 2014 - 12:00 a.m.

Simple One File Guestbook 1.0 Security Bypass Vulnerability

2014-07-0100:00:00
Root
www.seebug.org
6

No description provided by source.


                                                source: http://www.securityfocus.com/bid/19437/info

Simple one-file guestbook is prone to a security-bypass vulnerability. An attacker can bypass authentication measures by using a specific URL to delete all guestbook entries.

Version 1.0 of Simple one-file guestbook is vulnerable. Other versions may be affected as well.

#Simple One-File Guestbook Adminstrator Credential Bypass
#Proof of Concept URL

http://www.example.com/[path]/guestbook.php?id=4