EDB-5736

functional

1Book Guestbook Script 1.0.1 - Code Execution

view exploit source exploit_dbverifiedtype webappsauthor JIKOpublished 2008-06-03catalog exploit_db

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2008-2638US	high10.0	3.86% (90th)	Exploit	2008-06-10
Static code injection vulnerability in guestbook.php in 1Book 1.0.1 and earlier allows remote attackers to upload arbitrary PHP code via the message parameter in an HTML webform, w…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.