CVE-2008-6934 Static code injection vulnerability in Sanus|artificium (aka Sanusart) Free simple guestbook PHP script, when downloaded before 20081111, allows remote attackers to inject arbitrary PHP code into mess...
HighCVSS 7.5
EPSS 2.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Static code injection vulnerability in Sanus|artificium (aka Sanusart) Free simple guestbook PHP script, when downloaded before 20081111, allows remote attackers to inject arbitrary PHP code into messages.txt via the message parameter to act.php, which is executed when guestbook/guestbook.php is accessed. NOTE: some of these details are obtained from third party information.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sansuart free simple guestbook php script | All versions | No fix listed |
References
- 49703 vdb-entry
- 32643 third-party-advisory vendor-advisory
- www.sanusart.com
- 32240 exploit vdb-entry
- ADV-2008-3095 vdb-entry vendor-advisory
- spgs-act-code-execution(46526) vdb-entry
- 7079 exploit