VYPR
← All advisories
Unrated severityNVD Advisory· Published Mar 31, 2009· Updated Jun 16, 2026

CVE-2005-4880

CVE-2005-4880

Description

Jax Guestbook 3.1 and 3.31 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain IP addresses of users via a direct request to (1) guestbook, (2) guestbook_ips2block, (3) ips2block, and (4) formmailer/logfile.csv.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Jax Scripts/Jax Guestbook2 versions
    cpe:2.3:a:jax_scripts:jax_guestbook:3.1:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:jax_scripts:jax_guestbook:3.1:*:*:*:*:*:*:*
    • cpe:2.3:a:jax_scripts:jax_guestbook:3.3.1:*:*:*:*:*:*:*
  • Bg Guestbook/Bg Guestbookllm-fuzzy
    Range: 3.1, 3.31

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.