CVE-2007-2501

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-05-04 · updated 2026-06-16

Description

Eval injection vulnerability in codepress.html in CodePress before 0.9.4 allows remote attackers to execute arbitrary code via certain input that is used in an eval function call.

Affected products

Fernando M.A.D.S. Codepress: through 0.9.3

References

http://codepress.sourceforge.net/changelog.php
http://osvdb.org/36484
http://secunia.com/advisories/25124
http://sourceforge.net/project/shownotes.php?release_id=505510
http://www.securityfocus.com/bid/23788
http://www.vupen.com/english/advisories/2007/1638
https://exchange.xforce.ibmcloud.com/vulnerabilities/34055
http://codepress.sourceforge.net/changelog.php
http://osvdb.org/36484
http://secunia.com/advisories/25124
http://sourceforge.net/project/shownotes.php?release_id=505510
http://www.securityfocus.com/bid/23788

Get alerted when CVE-2007-2501 or the next vulnerability affects your stack