high7.5Public exploit code
CVE-2007-2093
Direct static code injection vulnerability in index.php in Limesoft Guestbook (LS Simple Guestbook) 1.0 allows remote attackers to inject arbitrary PHP code in…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- LS Simple Guestbook 1.0 - Remote Code Execution2007-04-14 · webapps · php · Verified
Impact
Direct static code injection vulnerability in index.php in Limesoft Guestbook (LS Simple Guestbook) 1.0 allows remote attackers to inject arbitrary PHP code into posts.txt via the message parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Limesoft | Limesoft Guestbook | Version 1.0 |
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/24904
- http://securityreason.com/securityalert/2590
- http://www.securityfocus.com/archive/1/465864/100/0/threaded
- http://www.securityfocus.com/bid/23503
- http://www.vupen.com/english/advisories/2007/1393
- https://exchange.xforce.ibmcloud.com/vulnerabilities/33666
- https://www.exploit-db.com/exploits/3735
- http://secunia.com/advisories/24904
- http://securityreason.com/securityalert/2590
- http://www.securityfocus.com/archive/1/465864/100/0/threaded
- http://www.securityfocus.com/bid/23503
- http://www.vupen.com/english/advisories/2007/1393
- https://exchange.xforce.ibmcloud.com/vulnerabilities/33666
- https://www.exploit-db.com/exploits/3735