CVE-2007-2093
high · 7.5Direct static code injection vulnerability in index.php in Limesoft Guestbook (LS Simple Guestbook) 1.0 allows remote attackers to inject arbitrary PHP code into posts.txt via the message parameter.
7.5
CVSS
45.7%
EPSS (exploit prob.)
99th
EPSS percentile
2007-04-18
Published
AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| limesoft | limesoft_guestbook | 1.0 |
Check a specific version with /api/v1/cve/match.
References
- http://secunia.com/advisories/24904
- http://securityreason.com/securityalert/2590
- http://www.securityfocus.com/archive/1/465864/100/0/threaded
- http://www.securityfocus.com/bid/23503
- http://www.vupen.com/english/advisories/2007/1393
- https://exchange.xforce.ibmcloud.com/vulnerabilities/33666
- https://www.exploit-db.com/exploits/3735
- http://secunia.com/advisories/24904
- http://securityreason.com/securityalert/2590
- http://www.securityfocus.com/archive/1/465864/100/0/threaded
- http://www.securityfocus.com/bid/23503
- http://www.vupen.com/english/advisories/2007/1393
- https://exchange.xforce.ibmcloud.com/vulnerabilities/33666
- https://www.exploit-db.com/exploits/3735
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2007-2093