Vulnerability Description
Eval injection vulnerability in adodb-perf-module.inc.php in ADOdb Lite 1.42 and earlier, as used in products including CMS Made Simple, SAPID CMF, Journalness, PacerCMS, and Open-Realty, allows remote attackers to execute arbitrary code via PHP sequences in the last_module parameter.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Adodb Lite | Adodb Lite | <= 1.42 |
| Cmsmadesimple | Cms Made Simple | All versions |
| Journalness | Journalness | All versions |
| Open-Realty | Open-Realty | All versions |
| Pacercms | Pacercms | All versions |
| Sapid | Sapid Cmf | All versions |
Related Weaknesses (CWE)
References
- http://osvdb.org/40596
- http://osvdb.org/41422
- http://osvdb.org/41426
- http://osvdb.org/41427
- http://osvdb.org/41428
- http://secunia.com/advisories/26928Vendor Advisory
- http://secunia.com/advisories/28859Vendor Advisory
- http://secunia.com/advisories/28873Vendor Advisory
- http://secunia.com/advisories/28874Vendor Advisory
- http://secunia.com/advisories/28886Vendor Advisory
- http://www.attrition.org/pipermail/vim/2007-September/001800.htmlExploit
- http://www.securityfocus.com/bid/25768
- http://www.vupen.com/english/advisories/2007/3261
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36733
- https://exchange.xforce.ibmcloud.com/vulnerabilities/40389
FAQ
What is CVE-2007-5056?
CVE-2007-5056 is a vulnerability with a CVSS score of 6.8 (MEDIUM). Eval injection vulnerability in adodb-perf-module.inc.php in ADOdb Lite 1.42 and earlier, as used in products including CMS Made Simple, SAPID CMF, Journalness, PacerCMS, and Open-Realty, allows remot...
How severe is CVE-2007-5056?
CVE-2007-5056 has been rated MEDIUM with a CVSS base score of 6.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2007-5056?
Check the references section above for vendor advisories and patch information. Affected products include: Adodb Lite Adodb Lite, Cmsmadesimple Cms Made Simple, Journalness Journalness, Open-Realty Open-Realty, Pacercms Pacercms.