CVE-2007-4454 Eval injection vulnerability in environment.php in Olate Download (od) 3.4.1 allows context-dependent attackers to execute arbitrary code via a crafted version string, as referenced by the (1) PDO::AT...
MediumCVSS 6.8
EPSS 2.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Eval injection vulnerability in environment.php in Olate Download (od) 3.4.1 allows context-dependent attackers to execute arbitrary code via a crafted version string, as referenced by the (1) PDO::ATTR_SERVER_VERSION or (2) PDO::ATTR_CLIENT_VERSION attribute.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| olatedownload | = 3.4.1 | No fix listed |
References
- myimei.com exploit
- 3038 third-party-advisory
- sourceforge.net
- 20070817 Olate Download 3.4.1~environment.php.php~Code Execution mailing-list
- 20070821 Re: Olate Download 3.4.1 ~ admin.php ~ Admin authentication bypassing mailing-list
- 25356 exploit vdb-entry
- olate-environment-code-execution(36087) vdb-entry