CVE-2008-6446 Static code injection vulnerability in the Guestbook component in CMS MAXSITE allows remote attackers to inject arbitrary PHP code into the guestbook via the message parameter.
HighCVSS 7.5
EPSS 2.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Static code injection vulnerability in the Guestbook component in CMS MAXSITE allows remote attackers to inject arbitrary PHP code into the guestbook via the message parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| geniuscyber maxsite | All versions | No fix listed |
References
- 32588 exploit vdb-entry
- guestbook-index-command-execution(47025) vdb-entry
- 7322 exploit