Lucene search
HistoryJun 10, 2008 - 12:32 a.m.
CVE-2008-2638
cve-2008-2638
static code injection
1book
php
vulnerability
webform
nvd
8.1 High
AI Score
Confidence
Low
10 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.06 Low
EPSS
Percentile
93.5%
Static code injection vulnerability in guestbook.php in 1Book 1.0.1 and earlier allows remote attackers to upload arbitrary PHP code via the message parameter in an HTML webform, which is written to data.php.
| CPE | Name | Operator | Version |
|---|---|---|---|
| 1-script:1-book | 1-script 1-book | le | 1.0.1 |
8.1 High
AI Score
Confidence
Low
10 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.06 Low
EPSS
Percentile
93.5%
Related for CVE-2008-2638