SaO has discovered a security issue in HyperBook Guestbook, which can be exploited by malicious people to disclose sensitive information.

The security issue is caused due to information being stored in data/gbconfiguration.dat inside the web root. This can be exploited to disclose the administrator's MD5 password hash.

The security issue is confirmed in version 1.30. Other versions may also be affected.

Solution
Restrict access to the data/gbconfiguration.dat file.

Provided and/or discovered by
SaO

Deep Links
Links available to Secunia VIM customers