CVE-2007-4937: Comscripts Cs Guestbook

Medium severity, CVSS 5.0. EPSS: 2.6% chance of exploitation in the next 30 days.

CS Guestbook stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain the admin name and MD5 password hash via a direct request for base/usr/0.php.

Affected products

• Comscripts Cs Guestbook: any version

Published 2007-09-18. Last modified 2026-06-16.