medium6.8Public exploit code
CVE-2007-5056
Eval injection vulnerability in adodb-perf-module.inc.php in ADOdb Lite 1.42 and earlier, as used in products including CMS Made Simple, SAPID CMF, Journalness…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- PacerCMS 0.6 - 'last_module' Remote Code Execution2008-02-10 · webapps · php · Verified
- SAPID CMF Build 87 - 'last_module' Remote Code Execution2008-02-10 · webapps · php · Verified
- Journalness 4.1 - 'last_module' Remote Code Execution2008-02-09 · webapps · php · Verified
- Open-Realty 2.4.3 - 'last_module' Remote Code Execution2008-02-09 · webapps · php · Verified
- CMS Made Simple 1.2 - Remote Code Execution2007-09-21 · webapps · php · Verified
Impact
Eval injection vulnerability in adodb-perf-module.inc.php in ADOdb Lite 1.42 and earlier, as used in products including CMS Made Simple, SAPID CMF, Journalness, PacerCMS, and Open-Realty, allows remote attackers to execute arbitrary code via PHP sequences in the last_module parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Adodb Lite | Adodb Lite | through 1.42 |
| Cmsmadesimple | Cms Made Simple | All versions |
| Journalness | Journalness | All versions |
| Open-Realty | Open-Realty | All versions |
| Pacercms | Pacercms | All versions |
| Sapid | Sapid Cmf | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- http://osvdb.org/40596
- http://osvdb.org/41422
- http://osvdb.org/41426
- http://osvdb.org/41427
- http://osvdb.org/41428
- http://secunia.com/advisories/26928
- http://secunia.com/advisories/28859
- http://secunia.com/advisories/28873
- http://secunia.com/advisories/28874
- http://secunia.com/advisories/28886
- http://www.attrition.org/pipermail/vim/2007-September/001800.html
- http://www.securityfocus.com/bid/25768
- http://www.vupen.com/english/advisories/2007/3261
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36733
- https://exchange.xforce.ibmcloud.com/vulnerabilities/40389
- https://exchange.xforce.ibmcloud.com/vulnerabilities/40393
- https://exchange.xforce.ibmcloud.com/vulnerabilities/40395
- https://exchange.xforce.ibmcloud.com/vulnerabilities/40396
- https://www.exploit-db.com/exploits/4442
- https://www.exploit-db.com/exploits/5090
- https://www.exploit-db.com/exploits/5091
- https://www.exploit-db.com/exploits/5097
- https://www.exploit-db.com/exploits/5098
- http://osvdb.org/40596
- http://osvdb.org/41422