CVE-2008-6008: Herongyang Hybook

Medium severity, CVSS 5.0. EPSS: 1.2% chance of exploitation in the next 30 days.

hyBook Guestbook Script stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing a password via a direct request for hyBook.mdb.

Affected products

• Herongyang Hybook: version _nil_ only

Published 2009-01-30. Last modified 2026-06-16.