CVE-2007-5056 Eval injection vulnerability in adodb-perf-module.inc.php in ADOdb Lite 1.42 and earlier, as used in products including CMS Made Simple, SAPID CMF, Journalness, PacerCMS, and Open-Realty, allows remot...
MediumCVSS 6.8
EPSS 27.9%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Eval injection vulnerability in adodb-perf-module.inc.php in ADOdb Lite 1.42 and earlier, as used in products including CMS Made Simple, SAPID CMF, Journalness, PacerCMS, and Open-Realty, allows remote attackers to execute arbitrary code via PHP sequences in the last_module parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| adodb lite | <= 1.42 | No fix listed |
| cmsmadesimple cms made simple | All versions | No fix listed |
| journalness | All versions | No fix listed |
| open-realty | All versions | No fix listed |
| pacercms | All versions | No fix listed |
| sapid cmf | All versions | No fix listed |
References
- 40596 vdb-entry
- 41422 vdb-entry
- 41426 vdb-entry
- 41427 vdb-entry
- 41428 vdb-entry
- 26928 third-party-advisory vendor-advisory
- 28859 third-party-advisory vendor-advisory
- 28873 third-party-advisory vendor-advisory
- 28874 third-party-advisory vendor-advisory
- 28886 third-party-advisory vendor-advisory
- 20070924 CMS Made Simple eval injection is really an ADOdb Lite problem exploit mailing-list
- 25768 vdb-entry
- ADV-2007-3261 vdb-entry
- cmsmadesimple-adodbperfmod-code-execution(36733) vdb-entry
- pacercms-lastmodule-code-execution(40389) vdb-entry
- journalness-lastmodule-code-execution(40393) vdb-entry
- openrealty-lastmodule-code-execution(40395) vdb-entry
- sapidcmf-lastmodule-code-execution(40396) vdb-entry
- 4442 exploit
- 5090 exploit
- 5091 exploit
- 5097 exploit
- 5098 exploit