Allmyguests · Allmyguests · CVE-2006-4993
**Name of the Vulnerable Software and Affected Versions**
AllMyGuests versions 0.4.1 and earlier
**Description**
The issue allows remote attackers to execute arbitrary PHP code via a URL in the ` AMGconfig[cfg serverpath]` parameter in (1) modules/AllMyGuests/signin.php and (2) AllMyGuests/signin.php.
**Recommendations**
For AllMyGuests versions 0.4.1 and earlier, consider disabling the ` AMGconfig[cfg serverpath]` parameter in the affected modules until a patch is available. Restrict access to the signin.php files to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.