34999vdb entry
http://osvdb.org/34999 CVE-2007-2141
ShoutPro 1.5.2 - 'shout.php' Remote Code Injection
Record summary
CVE-2007-2141 has a selected CVSS score of 7.5; EIP currently links 1 catalogued exploit.
Description
Direct static code injection vulnerability in shoutbox.php in ShoutPro 1.5.2 allows remote attackers to inject arbitrary PHP code into shouts.php via the shout parameter.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBShoutPro 1.5.2 - 'shout.php' Remote Code InjectionExploitDB exploitby GammaraysNot analyzed1 file
References
924939Third-party advisory
http://secunia.com/advisories/24939 2593Third-party advisory
http://securityreason.com/securityalert/2593 20070417 ShoutPro 1.5.2 - arbitrary code executionmailing list
http://www.securityfocus.com/archive/1/466037/100/0/threaded 23542vdb entry
http://www.securityfocus.com/bid/23542 ADV-2007-1432vdb entry
http://www.vupen.com/english/advisories/2007/1432 shoutpro-shouts-code-execution(33727)vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/33727 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2007-2141 3758exploit
https://www.exploit-db.com/exploits/3758