NuytsTech Security

CVE-2007-2093

by ·

Direct static code injection vulnerability in index.php in Limesoft Guestbook (LS Simple Guestbook) 1.0 allows remote attackers to inject arbitrary PHP code into posts.txt via the message parameter.

Date published : 2007-04-18

http://www.securityfocus.com/bid/23503

http://www.securityfocus.com/archive/1/465864/100/0/threaded

Tags: