CVE-2007-6550

EPSS 6.8%

form.php in PMOS Help Desk 2.4 and earlier sends a redirect to the web browser but does not exit, which allows remote attackers to conduct eval injection attacks and execute arbitrary PHP code via the options array parameter.

Affected products

n/a · n/a

public PoCs found — 1

cve_referencewww.exploit-db.com/exploits/4789unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://osvdb.org/42662 http://secunia.com/advisories/28201 https://exchange.xforce.ibmcloud.com/vulnerabilities/39274 https://www.exploit-db.com/exploits/4789 http://www.securityfocus.com/bid/27032 http://www.vupen.com/english/advisories/2007/4321