CVE-2005-4880 Jax Guestbook 3.1 and 3.31 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain IP addresses of users via a direct request to (1) g...
MediumCVSS 5.0
EPSS 2.4%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Jax Guestbook 3.1 and 3.31 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain IP addresses of users via a direct request to (1) guestbook, (2) guestbook_ips2block, (3) ips2block, and (4) formmailer/logfile.csv.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| jax scripts jax guestbook | = 3.1 | No fix listed |
| jax scripts jax guestbook | = 3.3.1 | No fix listed |
References
- lostmon.blogspot.com exploit
- 16337 third-party-advisory vendor-advisory