CVE-2008-6446
Geniuscyber Maxsite - Code Injection
Title source: ruleDescription
Static code injection vulnerability in the Guestbook component in CMS MAXSITE allows remote attackers to inject arbitrary PHP code into the guestbook via the message parameter.
Exploits (1)
exploitdb
WORKING POC
VERIFIED
by CWH Underground · perlwebappsphp
https://www.exploit-db.com/exploits/7322
Scores
EPSS
0.0320
EPSS Percentile
87.0%
Details
CWE
CWE-94
Status
published
Products (1)
geniuscyber/maxsite
Published
Mar 09, 2009
Tracked Since
Feb 18, 2026