CVE-2006-6764: Keep It Simple Guest Book

Medium severity, CVSS 6.8. EPSS: 2.1% chance of exploitation in the next 30 days.

PHP remote file inclusion vulnerability in authenticate.php in Keep It Simple Guest Book (KISGB), when executing PHP through CGI, allows remote attackers to execute arbitrary PHP code via a URL in the default_path_to_themes parameter.

Affected products

• Keep It Simple Guest Book Keep It Simple Guest Book: up to and including 5.1.1; version 5.0 only

Published 2006-12-27. Last modified 2026-06-16.