CVE-2008-6934

Static code injection vulnerability in Sanus|artificium (aka Sanusart) Free simple guestbook PHP script, when downloaded before 20081111, allows remote attackers to inject arbitrary PHP code into messages.txt via the message parameter to act.php, which is executed when guestbook/guestbook.php is accessed. NOTE: some of these details are obtained from third party information.

• CWE-94

• http://osvdb.org/49703
• http://secunia.com/advisories/32643Vendor Advisory
• http://www.sanusart.com/news.php
• http://www.securityfocus.com/bid/32240Exploit
• http://www.vupen.com/english/advisories/2008/3095Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/46526
• https://www.exploit-db.com/exploits/7079
• http://osvdb.org/49703
• http://secunia.com/advisories/32643Vendor Advisory
• http://www.sanusart.com/news.php
• http://www.securityfocus.com/bid/32240Exploit
• http://www.vupen.com/english/advisories/2008/3095Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/46526
• https://www.exploit-db.com/exploits/7079

Published

Aug 11, 2009

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2008-6928Unrestricted file upload vulnerability in PHPStore Complete …
• CVE-2008-6929Unrestricted file upload vulnerability in PHPStore Auto Clas…
• CVE-2008-6930Unrestricted file upload vulnerability in PHPStore Real Esta…
• CVE-2008-6931Unrestricted file upload vulnerability in PHPStore Job Searc…
• CVE-2008-6932Unrestricted file upload vulnerability in submit_file.php in…
• CVE-2008-6933Directory traversal vulnerability in index.php in MiniGal b1…
• CVE-2008-6935Argument injection vulnerability in Exodus 0.10 allows remot…
• CVE-2008-6936Argument injection vulnerability in Exodus 0.10 allows remot…
• CVE-2008-6937Argument injection vulnerability in Exodus 0.10 allows remot…
• CVE-2008-6938Pi3Web 2.0.3 before PL2, when installed on Windows as a desk…
• CVE-2008-6939TurnkeyForms Web Hosting Directory allows remote attackers t…
• CVE-2008-6940TurnkeyForms Web Hosting Directory stores sensitive informat…