high7.5Public exploit code
CVE-2007-1998
Direct static code injection vulnerability in HIOX Guest Book (HGB) 4.0 allows remote attackers to inject arbitrary PHP code via the Email field, which results…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- HIOX GUEST BOOK (HGB) 4.0 - Remote Code Execution2007-04-10 · webapps · php · Verified
Impact
Direct static code injection vulnerability in HIOX Guest Book (HGB) 4.0 allows remote attackers to inject arbitrary PHP code via the Email field, which results in code execution through a direct request to gb.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hiox India | Guest Book | Version 4.0 |
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/24835
- http://www.vupen.com/english/advisories/2007/1333
- https://exchange.xforce.ibmcloud.com/vulnerabilities/33540
- https://www.exploit-db.com/exploits/3697
- http://secunia.com/advisories/24835
- http://www.vupen.com/english/advisories/2007/1333
- https://exchange.xforce.ibmcloud.com/vulnerabilities/33540
- https://www.exploit-db.com/exploits/3697