CVE-2007-2093

35Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendepss 46%

exploitation probability

46%top 1% of all CVEs

observed exploitation

nono source reports it

1 public exploit(s)

Direct static code injection vulnerability in index.php in Limesoft Guestbook (LS Simple Guestbook) 1.0 allows remote attackers to inject arbitrary PHP code into posts.txt via the message parameter.

Affected products

n/a · n/a

public PoCs found — 1

cve_referencewww.exploit-db.com/exploits/3735unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

http://secunia.com/advisories/24904 http://securityreason.com/securityalert/2590 https://exchange.xforce.ibmcloud.com/vulnerabilities/33666 https://www.exploit-db.com/exploits/3735 http://www.securityfocus.com/archive/1/465864/100/0/threaded http://www.securityfocus.com/bid/23503 http://www.vupen.com/english/advisories/2007/1393