Security Advisory
CVE-2007-0926
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
The dologin function in guestbook.php in KvGuestbook 1.0 Beta allows remote attackers to gain administrative privileges, probably via modified $mysql['pass'] and $gbpass variables.