CVE-2004-1554: Alexphpteam Alex Guestbook

High severity, CVSS 7.5. EPSS: 7.3% chance of exploitation in the next 30 days.

PHP remote file inclusion vulnerability in livre_include.php in @lex Guestbook allows remote attackers to execute arbitrary PHP code by modifying the chem_absolu parameter to reference a URL on a remote web server that contains the code.

Affected products

• Alexphpteam Alex Guestbook: version 3.12 only

Published 2004-12-31. Last modified 2026-06-16.