CVE-2007-0535

Summary

Multiple eval injection vulnerabilities in Vote! Pro 4.0, and possibly earlier, allow remote attackers to execute arbitrary code via requests to unspecified PHP scripts with the poll_id parameter, which is supplied to eval function calls, a different set of vectors than CVE-2007-0504. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• http://www.vupen.com/english/advisories/2007/0300
• http://osvdb.org/31606
• http://secunia.com/advisories/23834

References

• http://www.vupen.com/english/advisories/2007/0300
• http://osvdb.org/31606
• http://secunia.com/advisories/23834

• ←Previous
• Next→