CVE-2007-5056

Description

Eval injection vulnerability in adodb-perf-module.inc.php in ADOdb Lite 1.42 and earlier, as used in products including CMS Made Simple, SAPID CMF, Journalness, PacerCMS, and Open-Realty, allows remote attackers to execute arbitrary code via PHP sequences in the last_module parameter.

References

https://www.exploit-db.com/exploits/5098

https://www.exploit-db.com/exploits/5097

https://www.exploit-db.com/exploits/5091

https://www.exploit-db.com/exploits/5090

https://www.exploit-db.com/exploits/4442

https://exchange.xforce.ibmcloud.com/vulnerabilities/40396

https://exchange.xforce.ibmcloud.com/vulnerabilities/40395

https://exchange.xforce.ibmcloud.com/vulnerabilities/40393

https://exchange.xforce.ibmcloud.com/vulnerabilities/40389

https://exchange.xforce.ibmcloud.com/vulnerabilities/36733

http://www.vupen.com/english/advisories/2007/3261

http://www.securityfocus.com/bid/25768

http://secunia.com/advisories/28886

http://secunia.com/advisories/28874

http://secunia.com/advisories/28873

http://secunia.com/advisories/28859

http://secunia.com/advisories/26928

http://osvdb.org/41428

http://osvdb.org/41427

http://osvdb.org/41426

http://osvdb.org/41422

http://osvdb.org/40596

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS