CVE Feed

    Dashboard / CVE / CVE-2007-5056

    CVE-2007-5056

    Eval injection vulnerability in adodb-perf-module.inc.php in ADOdb Lite 1.42 and earlier, as used in products including CMS Made Simple, SAPID CMF, Journalness, PacerCMS, and Open-Realty, allows remote attackers to execute arbitrary code via PHP sequences in the last_module parameter.

    Published:Sep 24, 2007
    Last Modified:Apr 23, 2026
    EPS:Sep 24, 2007
    EPSS Score:0.81715
    CVSS Score:6.8

    Affected Products

    Vendor
    Adodb Lite
    Product
    Adodb Lite
    Vendor
    Cmsmadesimple
    Product
    Cms Made Simple
    Vendor
    Journalness
    Product
    Journalness
    Vendor
    Open-realty
    Product
    Open-realty
    Vendor
    Pacercms
    Product
    Pacercms
    Vendor
    Sapid
    Product
    Sapid Cmf

    Exploits

    http://www.attrition.org/pipermail/vim/2007-September/001800.htmlhttp://www.attrition.org/pipermail/vim/2007-September/001800.htmlhttps://www.exploit-db.com/exploits/4442https://www.exploit-db.com/exploits/5090https://www.exploit-db.com/exploits/5091https://www.exploit-db.com/exploits/5097https://www.exploit-db.com/exploits/5098

    References

    http://osvdb.org/40596
    http://osvdb.org/41422
    http://osvdb.org/41426
    http://osvdb.org/41427
    http://osvdb.org/41428
    http://secunia.com/advisories/26928
    http://secunia.com/advisories/28859
    http://secunia.com/advisories/28873
    http://secunia.com/advisories/28874
    http://secunia.com/advisories/28886
    http://www.attrition.org/pipermail/vim/2007-September/001800.html
    http://www.securityfocus.com/bid/25768
    http://www.vupen.com/english/advisories/2007/3261
    https://exchange.xforce.ibmcloud.com/vulnerabilities/36733
    https://exchange.xforce.ibmcloud.com/vulnerabilities/40389
    https://exchange.xforce.ibmcloud.com/vulnerabilities/40393
    https://exchange.xforce.ibmcloud.com/vulnerabilities/40395
    https://exchange.xforce.ibmcloud.com/vulnerabilities/40396
    https://www.exploit-db.com/exploits/4442
    https://www.exploit-db.com/exploits/5090
    https://www.exploit-db.com/exploits/5091
    https://www.exploit-db.com/exploits/5097
    https://www.exploit-db.com/exploits/5098
    http://osvdb.org/40596
    http://osvdb.org/41422
    http://osvdb.org/41426
    http://osvdb.org/41427
    http://osvdb.org/41428
    http://secunia.com/advisories/26928
    http://secunia.com/advisories/28859
    http://secunia.com/advisories/28873
    http://secunia.com/advisories/28874
    http://secunia.com/advisories/28886
    http://www.attrition.org/pipermail/vim/2007-September/001800.html
    http://www.securityfocus.com/bid/25768
    http://www.vupen.com/english/advisories/2007/3261
    https://exchange.xforce.ibmcloud.com/vulnerabilities/36733
    https://exchange.xforce.ibmcloud.com/vulnerabilities/40389
    https://exchange.xforce.ibmcloud.com/vulnerabilities/40393
    https://exchange.xforce.ibmcloud.com/vulnerabilities/40395
    https://exchange.xforce.ibmcloud.com/vulnerabilities/40396
    https://www.exploit-db.com/exploits/4442
    https://www.exploit-db.com/exploits/5090
    https://www.exploit-db.com/exploits/5091
    https://www.exploit-db.com/exploits/5097
    https://www.exploit-db.com/exploits/5098

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High