Critical

DATE	CVE	VULNERABILITY TITLE	RISK
2008-06-10	CVE-2008-2638	Code Injection vulnerability in 1-Script 1-Book Static code injection vulnerability in guestbook.php in 1Book 1.0.1 and earlier allows remote attackers to upload arbitrary PHP code via the message parameter in an HTML webform, which is written to data.php. network low complexity 1-script CWE-94 critical	10.0

CVE is a registered MITRE Corporation trademark and MITRE's CVE website is the authoritative source of CVE content. CWE is a registered MITRE Corporation trademark and MITRE's CWE website is the authoritative source of CWE content.