← Database

CVE-2008-6446

HIGH CVSS: 7.5 Published: 2009-03-09 Modified: 2026-06-16

Description

Static code injection vulnerability in the Guestbook component in CMS MAXSITE allows remote attackers to inject arbitrary PHP code into the guestbook via the message parameter.

Affected Platforms

Geniuscyber Maxsite

Weakness Type

CWE-94

References