CVE-2007-5056

Adodb Lite < 1.42 - Code Injection

Title source: rule

Description

Eval injection vulnerability in adodb-perf-module.inc.php in ADOdb Lite 1.42 and earlier, as used in products including CMS Made Simple, SAPID CMF, Journalness, PacerCMS, and Open-Realty, allows remote attackers to execute arbitrary code via PHP sequences in the last_module parameter.

Exploits (5)

exploitdb WORKING POC VERIFIED
by GoLd_M · textwebappsphp
https://www.exploit-db.com/exploits/5097
exploitdb WORKING POC VERIFIED
by GoLd_M · textwebappsphp
https://www.exploit-db.com/exploits/5098
exploitdb WORKING POC VERIFIED
by Iron · perlwebappsphp
https://www.exploit-db.com/exploits/5090
exploitdb WORKING POC VERIFIED
by Iron · perlwebappsphp
https://www.exploit-db.com/exploits/5091
exploitdb WORKING POC VERIFIED
by irk4z · textwebappsphp
https://www.exploit-db.com/exploits/4442

Scores

EPSS 0.8172
EPSS Percentile 99.2%

Details

CWE
CWE-94
Status published
Products (6)
adodb_lite/adodb_lite < 1.42
cmsmadesimple/cms_made_simple
journalness/journalness
open-realty/open-realty
pacercms/pacercms
sapid/sapid_cmf
Published Sep 24, 2007
Tracked Since Feb 18, 2026