2007-02-14 11:00:00
mitre
PUBLISHED
The dologin function in guestbook.php in KvGuestbook 1.0 Beta allows remote attackers to gain administrative privileges, probably via modified $mysql[pass] and $gbpass variables.