VULNERABILITY INTELLIGENCE

CVE-2008-6934

CVSS score7.5 HIGH
EPSS probability2.91%
CISA KEVNot currently listed
Published2009-08-11
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:P/A:P

Description

Static code injection vulnerability in Sanus|artificium (aka Sanusart) Free simple guestbook PHP script, when downloaded before 20081111, allows remote attackers to inject arbitrary PHP code into messages.txt via the message parameter to act.php, which is executed when guestbook/guestbook.php is accessed. NOTE: some of these details are obtained from third party information.

Weakness classification

  • CWE-94: Improper Control of Generation of Code ('Code Injection')

Primary references