Vulnerability Description
Eval injection vulnerability in poll_frame.php in Vote! Pro 4.0, and possibly other scripts, allows remote attackers to execute arbitrary code via the poll_id parameter, which is supplied to an eval function call, a different vulnerability type than CVE-2005-4632.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Vote Pro | Vote Pro | <= 4.0 |
References
- http://osvdb.org/31606
- http://secunia.com/advisories/23834
- http://www.vupen.com/english/advisories/2007/0300
- https://www.exploit-db.com/exploits/3180
- http://osvdb.org/31606
- http://secunia.com/advisories/23834
- http://www.vupen.com/english/advisories/2007/0300
- https://www.exploit-db.com/exploits/3180
FAQ
What is CVE-2007-0504?
CVE-2007-0504 is a vulnerability with a CVSS score of 10.0 (HIGH). Eval injection vulnerability in poll_frame.php in Vote! Pro 4.0, and possibly other scripts, allows remote attackers to execute arbitrary code via the poll_id parameter, which is supplied to an eval f...
How severe is CVE-2007-0504?
CVE-2007-0504 has been rated HIGH with a CVSS base score of 10.0/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2007-0504?
Check the references section above for vendor advisories and patch information. Affected products include: Vote Pro Vote Pro.