CVE-2007-5056

28Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendepss 28%

exploitation probability

28%top 2% of all CVEs

observed exploitation

nono source reports it

5 public exploit(s)

Eval injection vulnerability in adodb-perf-module.inc.php in ADOdb Lite 1.42 and earlier, as used in products including CMS Made Simple, SAPID CMF, Journalness, PacerCMS, and Open-Realty, allows remote attackers to execute arbitrary code via PHP sequences in the last_module parameter.

Affected products

n/a · n/a

public PoCs found — 5

cve_referencewww.exploit-db.com/exploits/5097unverified cve_referencewww.exploit-db.com/exploits/4442unverified cve_referencewww.exploit-db.com/exploits/5091unverified cve_referencewww.exploit-db.com/exploits/5090unverified cve_referencewww.exploit-db.com/exploits/5098unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

http://osvdb.org/40596 http://osvdb.org/41422 http://osvdb.org/41426 http://osvdb.org/41427 http://osvdb.org/41428 http://secunia.com/advisories/26928 http://secunia.com/advisories/28859 http://secunia.com/advisories/28873 http://secunia.com/advisories/28874 http://secunia.com/advisories/28886 https://exchange.xforce.ibmcloud.com/vulnerabilities/36733 https://exchange.xforce.ibmcloud.com/vulnerabilities/40389