CVE-2007-2093

Published: Apr 18, 2007Modified: Apr 23, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Direct static code injection vulnerability in index.php in Limesoft Guestbook (LS Simple Guestbook) 1.0 allows remote attackers to inject arbitrary PHP code into posts.txt via the message parameter.

Affected (1)

Products: Limesoft: Limesoft Guestbook

Limesoft

1 product

Limesoft Guestbook

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Limesoft Limesoft Guestbook	Version 1.0

References (14)

http://secunia.com/advisories/24904

Source: cve@mitre.org

Vendor Advisory

http://securityreason.com/securityalert/2590

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/465864/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/23503

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2007/1393

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/33666

Source: cve@mitre.org

https://www.exploit-db.com/exploits/3735

Source: cve@mitre.org

http://secunia.com/advisories/24904