CVE-2007-2092 Direct static code injection vulnerability in index.php in Limesoft Guestbook (LS Simple Guestbook) allows remote attackers to inject arbitrary PHP code into posts.txt via the name parameter. NOTE: th...

HighCVSS 7.5 EPSS 1.9%

Published: 2007-04-18 13:00
Updated: 2026-06-17 01:38
Exploit status: No public exploit known

Description

Direct static code injection vulnerability in index.php in Limesoft Guestbook (LS Simple Guestbook) allows remote attackers to inject arbitrary PHP code into posts.txt via the name parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Affected products

Product	Affected versions	Fixed in
limesoft guestbook	= 1.0	No fix listed

References

ADV-2007-1393 vdb-entry

CVSS v2.0

7.5 High

AV:N/AC:L/Au:N/C:P/I:P/A:P

Access Vector: Network
Access Complexity: Low
Authentication: None
Confidentiality: Partial
Integrity: Partial
Availability: Partial

Weakness & likelihood

EPSS (exploitation probability, 30 days): 1.93% (percentile 80.3)
CWE: Not classified

Public exploit references

Metadata only. CVERadar never hosts or runs exploit code.

LS Simple Guestbook 1.0 - Remote Code Execution Exploit · Exploit Database (OffSec) · 2007-04-14