Security Advisory

CVE-2008-2638

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2008-06-10 00:00:00

Last updated 2024-08-07 09:05:30

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

Static code injection vulnerability in guestbook.php in 1Book 1.0.1 and earlier allows remote attackers to upload arbitrary PHP code via the message parameter in an HTML webform, which is written to data.php.

← Browse all CVEs View on cve.org ↗