CVE-2007-5693
SiteBar 3.3.8 - Authenticated PHP Code Injection via Translation Module
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2007-5693. PoCs published by Robert Buchholz.
AI-analyzed exploit summary This exploit demonstrates a command injection vulnerability in SiteBar's translator.php by manipulating the 'lang' parameter to execute arbitrary system commands. The PoC shows how an attacker can inject a command like 'uname -a' via the URL.
Description
Eval injection vulnerability in the translation module (translator.php) in SiteBar 3.3.8 allows remote authenticated users to execute arbitrary PHP code via the edit parameter in an upd cmd action, a different vulnerability than CVE-2007-5492.
Exploits (1)
This exploit demonstrates a command injection vulnerability in SiteBar's translator.php by manipulating the 'lang' parameter to execute arbitrary system commands. The PoC shows how an attacker can inject a command like 'uname -a' via the URL.