CVE-2005-4880

Jax Guestbook 3.1 and 3.31 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain IP…

published March 31, 2009

CVSS
—
EPSS
2%
Percentile
83.7
In the wild
Unconfirmed
What it is

Jax Guestbook 3.1 and 3.31 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain IP addresses of users via a direct request to (1) guestbook, (2) guestbook_ips2block, (3) ips2block, and (4) formmailer/logfile.csv.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02389 · 83.7th percentile
Published
2009-03-31T17:00Z
EPSS history
Timeline
  • 31 MAR 17:00Z
    Jax Guestbook 3.1 and 3.31 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain IP…
    cvelistv5