CVE-2008-1635: Directory traversal vulnerability in view_private.php in Keep It Simple Guest Book (KISGB) 5.0.0 and earlie...

Security readout for executives and security teams

KISGB guest book software can be tricked through a theme parameter into loading files from the server. If the vulnerable script is internet-facing, an attacker could potentially run code already present on that host. The record does not provide CVSS, a confirmed fixed version, or evidence of active exploitation. Exposure is likely limited to legacy websites still running Keep It Simple Guest Book with view_private.php reachable from the internet. The source bundle does not identify packaged CPEs, hosted-service exposure, or downstream products. Prioritize if any public site still runs KISGB. The business risk is mostly legacy-application exposure: a small forgotten guest book could become a foothold on a web server. If no KISGB exists, no action is required beyond recording non-exposure. Mitigation focus: Inventory public web assets for KISGB and view_private.php.; Remove or disable KISGB if it is no longer required.; Check vendor or maintainer guidance for a fixed release..

Prepared

Jun 28, 2026, 19:09 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.