2 matches found
Code injection
Static code injection vulnerability in guestbook.php in 1Book 1.0.1 and earlier allows remote attackers to upload arbitrary PHP code via the message parameter in an HTML webform, which is written to data.php...
10CVSS7.8AI score0.0386EPSS
SaveExploits1References5Affected Software1
CVE-2008-2638
Static code injection vulnerability in guestbook.php in 1Book 1.0.1 and earlier allows remote attackers to upload arbitrary PHP code via the message parameter in an HTML webform, which is written to data.php...
7.2AI score0.0386EPSS
SaveExploits1References5
20