CVE-2007-2093 Direct static code injection vulnerability in index.php in Limesoft Guestbook (LS Simple Guestbook) 1.0 allows remote attackers to inject arbitrary PHP code into posts.txt via the message parameter.
HighCVSS 7.5
EPSS 45.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Direct static code injection vulnerability in index.php in Limesoft Guestbook (LS Simple Guestbook) 1.0 allows remote attackers to inject arbitrary PHP code into posts.txt via the message parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| limesoft guestbook | = 1.0 | No fix listed |
References
- 24904 third-party-advisory vendor-advisory
- 2590 third-party-advisory
- 20070415 LS simple guestbook - arbitrary code execution mailing-list
- 23503 vdb-entry
- ADV-2007-1393 vdb-entry
- lsguestbook-index-code-execution(33666) vdb-entry
- 3735 exploit