CVE-2007-2141

Direct static code injection vulnerability in shoutbox.php in ShoutPro 1.5.2 allows remote attackers to inject arbitrary PHP code into shouts.php via the shout parameter.

Score

CVSS 2.0 7.5 High

Status

Modified - cve@mitre.org

Published

2007-04-19

Last modified

2024-08-07

Affected products

• Shoutpro (Shoutpro)

References

• http://osvdb.org/34999
• http://secunia.com/advisories/24939
• http://securityreason.com/securityalert/2593
• http://www.securityfocus.com/archive/1/466037/100/0/threaded
• http://www.securityfocus.com/bid/23542
• http://www.vupen.com/english/advisories/2007/1432
• https://exchange.xforce.ibmcloud.com/vulnerabilities/33727
• https://www.exploit-db.com/exploits/3758