CVE-2006-2158

Published: May 3, 2006Modified: Apr 16, 2026

6.4

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:N

Exploitability: 10.0 / Impact: 4.9

Source: NVD

Description

Dynamic variable evaluation vulnerability in index.php in Stadtaus Guestbook Script 1.7 and earlier, when register_globals is enabled, allows remote attackers to modify arbitrary program variables via parameters, which are evaluated as PHP variable variables, as demonstrated by performing PHP remote file inclusion using the include_files array parameter.

Affected (1)

Products: Stadtaus: Guestbook Script

1 product

Guestbook Script

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Stadtaus Guestbook Script	Up to 1.7

References (12)

http://retrogod.altervista.org/gbs_17_xpl_pl.html

Source: cve@mitre.org

http://secunia.com/advisories/19957

Source: cve@mitre.org

http://www.securityfocus.com/bid/17845

Source: cve@mitre.org

http://www.stadtaus.com/forum/t-2600.html

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/1660

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/26252

Source: cve@mitre.org

http://retrogod.altervista.org/gbs_17_xpl_pl.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/19957

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/17845

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.stadtaus.com/forum/t-2600.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2006/1660

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/26252

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.