CVEvulnerability
CVE-2008-6934
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2009-08-11
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-94
Description
Static code injection vulnerability in Sanus|artificium (aka Sanusart) Free simple guestbook PHP script, when downloaded before 20081111, allows remote attackers to inject arbitrary PHP code into messages.txt via the message parameter to act.php, which is executed when guestbook/guestbook.php is accessed. NOTE: some of these details are obtained from third party information.
Affected configurations
• sansuart free simple guestbook php script
Related
Weakness · CWE (1)
- CWE-94 Improper Control of Generation of Code weakness
References
- http://osvdb.org/49703 osvdb.org
- http://secunia.com/advisories/32643 Vendor Advisory
- http://www.sanusart.com/news.php www.sanusart.com
- http://www.securityfocus.com/bid/32240 Exploit
- http://www.vupen.com/english/advisories/2008/3095 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46526 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/7079 www.exploit-db.com
- http://osvdb.org/49703 osvdb.org
- http://secunia.com/advisories/32643 Vendor Advisory
- http://www.sanusart.com/news.php www.sanusart.com
- http://www.securityfocus.com/bid/32240 Exploit
- http://www.vupen.com/english/advisories/2008/3095 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46526 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/7079 www.exploit-db.com