CVE-2007-4932

Shop-script < 2.0 - Improper Input Validation

Title source: rule

Description

admin.php in Shop-Script FREE 2.0 and earlier sends a redirect to the web browser but does not exit when administrative credentials are missing, which allows remote attackers to access the admin panel.

Exploits (1)

exploitdb WORKING POC VERIFIED

by InATeam · phpwebappsphp

https://www.exploit-db.com/exploits/4419

View Code ZIP pw:eip

References (5)

[Third Party Advisory, VDB Entry] http://osvdb.org/40149

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/36646

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/25695

[Exploit, Third Party Advisory] https://www.exploit-db.com/exploits/4419

[Third Party Advisory] http://secunia.com/advisories/26840

Scores

EPSS 0.0496

EPSS Percentile 89.7%

Details

CWE

CWE-20

Status published

Products (1)

shop-script/shop-script < 2.0

Published Sep 18, 2007

Tracked Since Feb 18, 2026