CVE-2007-0926: Kvguestbook

High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days.

The dologin function in guestbook.php in KvGuestbook 1.0 Beta allows remote attackers to gain administrative privileges, probably via modified $mysql['pass'] and $gbpass variables.

Affected products

• Kvguestbook Kvguestbook: version 1.0_beta only

Published 2007-02-14. Last modified 2026-06-16.