Security Advisory
CVE-2009-4447
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
Jax Guestbook 3.5.0 allows remote attackers to bypass authentication and modify administrator settings via a direct request to admin/guestbook.admin.php.