Lucene search
HistoryApr 18, 2007 - 10:19 a.m.
CVE-2007-2093
cve-2007-2093
code injection
limesoft guestbook
ls simple guestbook
remote attack
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.3 High
AI Score
Confidence
High
0.021 Low
EPSS
Percentile
89.1%
Direct static code injection vulnerability in index.php in Limesoft Guestbook (LS Simple Guestbook) 1.0 allows remote attackers to inject arbitrary PHP code into posts.txt via the message parameter.
Affected configurations
Node
limesoftlimesoft_guestbookMatch1.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| limesoft:limesoft_guestbook | limesoft limesoft guestbook | eq | 1.0 |
Related
prion
prion
Code injection
2007-04-18 10:19:00
canvas
canvas
Immunity Canvas: LSGB_EXEC
2007-04-18 10:19:00
cvelist
cvelist
CVE-2007-2093
2007-04-18 10:00:00
nvd
nvd
CVE-2007-2093
2007-04-18 10:19:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.3 High
AI Score
Confidence
High
0.021 Low
EPSS
Percentile
89.1%
Related for CVE-2007-2093