CVE-2007-1553: Guestbara

Medium severity, CVSS 5.0. EPSS: 1.8% chance of exploitation in the next 30 days.

admin/configuration.php in Guestbara 1.2 and earlier allows remote attackers to modify the e-mail, name, and password of the admin account by setting the zapis parameter to "ok" and providing modified admin_mail, login, and pass parameters.

Affected products

• Guestbara Guestbara: up to and including 1.2

Published 2007-03-20. Last modified 2026-06-16.