Vulnerabilities > CVE-2006-3937 - Unspecified vulnerability in Xguestbook 1.02

047910
CVSS 0.0 - NONE
Attack vector
UNKNOWN
Attack complexity
UNKNOWN
Privileges required
UNKNOWN
Confidentiality impact
UNKNOWN
Integrity impact
UNKNOWN
Availability impact
UNKNOWN
xguestbook
NVD
Published: 2006-07-31
Updated: 2024-11-21

Summary

post.php in x_atrix xGuestBook 1.02 allows remote attackers to obtain sensitive information via a request without the (1) user, (2) mail, (3) p, or (4) url parameter, which reveals the installation path in an error message.

Vulnerable Configurations

Part Description Count
Application
Xguestbook
1

References