CVE-2007-5056

Severity: medium (CVSS 6.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 27.9% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2007-09-24 · updated 2026-06-16
Weakness: CWE-94

Description

Eval injection vulnerability in adodb-perf-module.inc.php in ADOdb Lite 1.42 and earlier, as used in products including CMS Made Simple, SAPID CMF, Journalness, PacerCMS, and Open-Realty, allows remote attackers to execute arbitrary code via PHP sequences in the last_module parameter.

Affected products

Adodb Lite: through 1.42
CMS Made Simple: all versions
Journalness: all versions
Open-Realty: all versions
Pacercms: all versions
Sapid Cmf: all versions

References

http://osvdb.org/40596
http://osvdb.org/41422
http://osvdb.org/41426
http://osvdb.org/41427
http://osvdb.org/41428
http://secunia.com/advisories/26928
http://secunia.com/advisories/28859
http://secunia.com/advisories/28873
http://secunia.com/advisories/28874
http://secunia.com/advisories/28886
http://www.attrition.org/pipermail/vim/2007-September/001800.html
http://www.securityfocus.com/bid/25768

Get alerted when CVE-2007-5056 or the next vulnerability affects your stack