Exploitation Summary
EIP tracks 1 public exploit for CVE-2007-1998. PoCs published by Dj7xpl.
AI-analyzed exploit summary This exploit demonstrates a remote code execution vulnerability in HIOX FREE Guest Book 4.0 by injecting PHP code into the email field, which is then executed when accessed via a crafted URL. The PoC provides clear steps to exploit the vulnerability.
Description
Direct static code injection vulnerability in HIOX Guest Book (HGB) 4.0 allows remote attackers to inject arbitrary PHP code via the Email field, which results in code execution through a direct request to gb.php.
Exploits (1)
This exploit demonstrates a remote code execution vulnerability in HIOX FREE Guest Book 4.0 by injecting PHP code into the email field, which is then executed when accessed via a crafted URL. The PoC provides clear steps to exploit the vulnerability.