National Cyber Awareness System

Vulnerability Summary for CVE-2007-5056

Overview

Eval injection vulnerability in adodb-perf-module.inc.php in ADOdb Lite 1.42 and earlier, as used in products including CMS Made Simple, SAPID CMF, Journalness, PacerCMS, and Open-Realty, allows remote attackers to execute arbitrary code via PHP sequences in the last_module parameter.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

External Source: XF

Name: sapidcmf-lastmodule-code-execution(40396)

Hyperlink:http://xforce.iss.net/xforce/xfdb/40396

External Source: XF

Name: openrealty-lastmodule-code-execution(40395)

Hyperlink:http://xforce.iss.net/xforce/xfdb/40395

External Source: XF

Name: journalness-lastmodule-code-execution(40393)

Hyperlink:http://xforce.iss.net/xforce/xfdb/40393

External Source: XF

Name: pacercms-lastmodule-code-execution(40389)

Hyperlink:http://xforce.iss.net/xforce/xfdb/40389

External Source: XF

Name: cmsmadesimple-adodbperfmod-code-execution(36733)

Hyperlink:http://xforce.iss.net/xforce/xfdb/36733

External Source: VUPEN

Name: ADV-2007-3261

Hyperlink:http://www.vupen.com/english/advisories/2007/3261

External Source: BID

Name: 25768

Hyperlink:http://www.securityfocus.com/bid/25768

External Source: MILW0RM

Name: 5098

Hyperlink:http://www.milw0rm.com/exploits/5098

External Source: MILW0RM

Name: 5097

Hyperlink:http://www.milw0rm.com/exploits/5097

External Source: MILW0RM

Name: 5091

Hyperlink:http://www.milw0rm.com/exploits/5091

External Source: MILW0RM

Name: 5090

Hyperlink:http://www.milw0rm.com/exploits/5090

External Source: MILW0RM

Name: 4442

Hyperlink:http://www.milw0rm.com/exploits/4442

External Source: VIM

Name: 20070924 CMS Made Simple eval injection is really an ADOdb Lite problem

Hyperlink:http://www.attrition.org/pipermail/vim/2007-September/001800.html

External Source: SECUNIA

Name: 28886

Type: Advisory

Hyperlink:http://secunia.com/advisories/28886

External Source: SECUNIA

Name: 28874

Type: Advisory

Hyperlink:http://secunia.com/advisories/28874

External Source: SECUNIA

Name: 28873

Type: Advisory

Hyperlink:http://secunia.com/advisories/28873

External Source: SECUNIA

Name: 28859

Type: Advisory

Hyperlink:http://secunia.com/advisories/28859

External Source: SECUNIA

Name: 26928

Type: Advisory

Hyperlink:http://secunia.com/advisories/26928

External Source: OSVDB

Name: 41428

Hyperlink:http://osvdb.org/41428

External Source: OSVDB

Name: 41427

Hyperlink:http://osvdb.org/41427

External Source: OSVDB

Name: 41426

Hyperlink:http://osvdb.org/41426

External Source: OSVDB

Name: 41422

Hyperlink:http://osvdb.org/41422

External Source: OSVDB

Name: 40596

Hyperlink:http://osvdb.org/40596