Unrated severityNVD Advisory· Published Apr 18, 2007· Updated Apr 23, 2026

CVE-2007-2093

Description

Direct static code injection vulnerability in index.php in Limesoft Guestbook (LS Simple Guestbook) 1.0 allows remote attackers to inject arbitrary PHP code into posts.txt via the message parameter.

Affected products

Limesoft/Limesoft Guestbook
cpe:2.3:a:limesoft:limesoft_guestbook:1.0:*:*:*:*:*:*:*

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

secunia.com/advisories/24904nvdVendor Advisory
securityreason.com/securityalert/2590nvd
www.securityfocus.com/archive/1/465864/100/0/threadednvd
www.securityfocus.com/bid/23503nvd
www.vupen.com/english/advisories/2007/1393nvd
exchange.xforce.ibmcloud.com/vulnerabilities/33666nvd
www.exploit-db.com/exploits/3735nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.045
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000