Approved changes feed: RSS · Atom

cpe:2.3:a:mcguestbook:mcguestbook:1.3:*:*:*:*:*:*:*

part: a version: 1.3 update: *

VendorMcguestbook (7b6218f3-40ea-56e7-a69c-5ef36203cde3)
ProductMcguestbook (75e5fd5a-1ff7-5e3d-be06-40b9cfdb8b32)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2006-3175 vulnerable 2026-06-08 04:49:08.487719 Details available
Multiple PHP remote file inclusion vulnerabilities in mcGuestbook 1.3 allow remote attackers to execute arbitrary PHP code via a URL in the lang parameter to (1) admin.php, (2) ecrire.php, and (3) lire.php. NOTE: it was later reported that the ecrire.php vector also affects 1.2. NOTE: this issue might be limited to a race condition during installation or an improper installation, since a completed installation creates an include file that prevents external control of the $lang variable.
Published: 2006-06-23T00:00:00.000Z
Updated: 2024-08-07T18:16:06.015Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.