24904Third-party advisory
http://secunia.com/advisories/24904 CVE-2007-2093
LS Simple Guestbook 1.0 - Remote Code Execution
Record summary
CVE-2007-2093 has a selected CVSS score of 7.5; EIP currently links 1 catalogued exploit.
Description
Direct static code injection vulnerability in index.php in Limesoft Guestbook (LS Simple Guestbook) 1.0 allows remote attackers to inject arbitrary PHP code into posts.txt via the message parameter.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBLS Simple Guestbook 1.0 - Remote Code ExecutionExploitDB exploitby GammaraysNot analyzed1 file
References
82590Third-party advisory
http://securityreason.com/securityalert/2590 20070415 LS simple guestbook - arbitrary code executionmailing list
http://www.securityfocus.com/archive/1/465864/100/0/threaded 23503vdb entry
http://www.securityfocus.com/bid/23503 ADV-2007-1393vdb entry
http://www.vupen.com/english/advisories/2007/1393 lsguestbook-index-code-execution(33666)vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/33666 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2007-2093 3735exploit
https://www.exploit-db.com/exploits/3735