CVE-2008-6934 | BDVDB-2026-37792 Detail

Description#

Static code injection vulnerability in Sanus|artificium (aka Sanusart) Free simple guestbook PHP script, when downloaded before 20081111, allows remote attackers to inject arbitrary PHP code into messages.txt via the message parameter to act.php, which is executed when guestbook/guestbook.php is accessed. NOTE: some of these details are obtained from third party information.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://secunia.com/advisories/32643
http://www.vupen.com/english/advisories/2008/3095
http://www.sanusart.com/news.php
https://exchange.xforce.ibmcloud.com/vulnerabilities/46526
http://osvdb.org/49703
https://www.exploit-db.com/exploits/7079
http://www.securityfocus.com/bid/32240

Exploit#

https://www.exploit-db.com/exploits/7079

History#

Version 12009-08-11Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.