CVE-2007-2501

Description

Eval injection vulnerability in codepress.html in CodePress before 0.9.4 allows remote attackers to execute arbitrary code via certain input that is used in an eval function call.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/34055

http://www.vupen.com/english/advisories/2007/1638

http://www.securityfocus.com/bid/23788

http://sourceforge.net/project/shownotes.php?release_id=505510

http://secunia.com/advisories/25124

http://osvdb.org/36484

http://codepress.sourceforge.net/changelog.php

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS