CVE-2008-2638 | BDVDB-2026-31007 Detail

Description#

Static code injection vulnerability in guestbook.php in 1Book 1.0.1 and earlier allows remote attackers to upload arbitrary PHP code via the message parameter in an HTML webform, which is written to data.php.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://www.exploit-db.com/exploits/5736
http://secunia.com/advisories/30146
https://exchange.xforce.ibmcloud.com/vulnerabilities/42854
http://www.vupen.com/english/advisories/2008/1735/references
http://1scripts.net/php-scripts/index.php?p=16

Exploit#

https://www.exploit-db.com/exploits/5736

History#

Version 12008-06-10Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.