Vulnerability   
Search   
    Search 324607 CVE descriptions
and 145615 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

Test ID:1.3.6.1.4.1.25623.1.0.51755
Category:Misc.
Title:MPM Guestbook Multiple vulnerabilities
Summary:NOSUMMARY
Description:Description:

We have detected that the remote host has MPM Guestbook
installed. This application suffers from several vulnerabilities:

Versions prior to 1.0.6 allow for the remote reading of
any file on your system.

Version 1.0.6 has a design flaw whereby anyone using the
software pulls, at run-time, PHP code from the author's
site whenever a user references the admin.php script.
This can slow down the loading of your web page.
It also means that if the author's site's security is ever
breached, a malicous attacker could automatically breach
the security of every site using this package.

Note that we did not verify the existence of the flaw
on this case, only that you have the application installed.
Please ensure that you have version 1.0.6 or later.

Risk factor : High

CopyrightCopyright (c) 2005 E-Soft Inc. http://www.securityspace.com

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit.

To run a free test of this vulnerability against your system, register below.




© 1998-2025 E-Soft Inc. All rights reserved.