CVE-2006-0861

Published: Feb 23, 2006Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Michael Salzer Guestbox 0.6, and other versions before 0.8, allows remote attackers to obtain the source IP addresses of guestbook entries via a direct request to /gb/gblog.

Affected (1)

Products: Michael Salzer: Guestbox

Michael Salzer

1 product

Guestbox

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Michael Salzer Guestbox	Version 0.6

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (14)

http://secunia.com/advisories/18946

Source: cve@mitre.org

PatchVendor Advisory

http://securityreason.com/securityalert/460

Source: cve@mitre.org

http://www.osvdb.org/23376

Source: cve@mitre.org

Patch

http://www.securityfocus.com/archive/1/425495/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/426663/100/0/threaded

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/0675

Source: cve@mitre.org

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/24799

Source: cve@mitre.org

http://secunia.com/advisories/18946