43604vdb entry
http://osvdb.org/43604 CVE-2007-5693
SiteBar 3.3.8 - '/translator.php?upd/cmd/Action/edit' Arbitrary PHP Code Execution
Record summary
CVE-2007-5693 has a selected CVSS score of 6.0; EIP currently links 1 catalogued exploit.
Description
Eval injection vulnerability in the translation module (translator.php) in SiteBar 3.3.8 allows remote authenticated users to execute arbitrary PHP code via the edit parameter in an upd cmd action, a different vulnerability than CVE-2007-5492.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBSiteBar 3.3.8 - '/translator.php?upd/cmd/Action/edit' Arbitrary PHP Code ExecutionExploitDB exploitby Robert BuchholzNot analyzed1 file
References
1127503Third-party advisory
http://secunia.com/advisories/27503 28008Third-party advisory
http://secunia.com/advisories/28008 3318Third-party advisory
http://securityreason.com/securityalert/3318 teamforge.netConfirmation
http://teamforge.net/viewcvs/viewcvs.cgi/tags/release-3.3.9/doc/history.txt?view=markup DSA-1423Vendor advisory
http://www.debian.org/security/2007/dsa-1423 GLSA-200711-05Vendor advisory
http://www.gentoo.org/security/en/glsa/glsa-200711-05.xml 20071018 Serious holes affecting SiteBar 3.3.8mailing list
http://www.securityfocus.com/archive/1/482499/100/0/threaded 26126vdb entry
http://www.securityfocus.com/bid/26126 ADV-2007-3768vdb entry
http://www.vupen.com/english/advisories/2007/3768 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2007-5693