CVE-2008-7006

NONE EPSS 93.0%

Published Aug 19, 200916y ago · Modified Jun 16, 20262w ago

Published Aug 19, 2009 16y ago

Last Modified Jun 16, 2026 2w ago

Description

Free PHP VX Guestbook 1.06 allows remote attackers to bypass authentication and download a backup of the database via a direct request to admin/backupdb.php.

Threat Intelligence

EPSS Exploit Probability

93.0% percentile

Exploit & Patch Status

Public Exploit Known

No Patch Available

Weaknesses 1

CWE-287 Improper Authentication Authentication

Affected Products 1

Vendor	Product	Version	Range
phpversion	php_vx_guestbook	1.06	any

References 5

osvdb.org http://osvdb.org/48156
secunia.com http://secunia.com/advisories/31850

Vendor Advisory
securityfocus.com http://www.securityfocus.com/bid/31174

Exploit
exchange.xforce.ibmcloud.com https://exchange.xforce.ibmcloud.com/vulnerabilities/45150
exploit-db.com https://www.exploit-db.com/exploits/6456

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.