CVE-2007-1998

Description

Direct static code injection vulnerability in HIOX Guest Book (HGB) 4.0 allows remote attackers to inject arbitrary PHP code via the Email field, which results in code execution through a direct request to gb.php.

References

https://www.exploit-db.com/exploits/3697

https://exchange.xforce.ibmcloud.com/vulnerabilities/33540

http://www.vupen.com/english/advisories/2007/1333

http://secunia.com/advisories/24835

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS