CVE-2008-6934

EPSS 2.9%

Static code injection vulnerability in Sanus|artificium (aka Sanusart) Free simple guestbook PHP script, when downloaded before 20081111, allows remote attackers to inject arbitrary PHP code into messages.txt via the message parameter to act.php, which is executed when guestbook/guestbook.php is accessed. NOTE: some of these details are obtained from third party information.

Produtos afetados

n/a · n/a

PoCs públicas encontradas — 1

cve_referencewww.exploit-db.com/exploits/7079não verificado

⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

http://osvdb.org/49703 http://secunia.com/advisories/32643 https://exchange.xforce.ibmcloud.com/vulnerabilities/46526 https://www.exploit-db.com/exploits/7079 http://www.sanusart.com/news.php http://www.securityfocus.com/bid/32240 http://www.vupen.com/english/advisories/2008/3095