Vulnerability Details CVE-2007-5492
Static code injection vulnerability in the translation module (translator.php) in SiteBar 3.3.8 allows remote authenticated users to execute arbitrary PHP code via the value parameter.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.016
EPSS Ranking 81.7%
CVSS Severity
CVSS v2 Score 4.6
References
- http://osvdb.org/43760
- http://secunia.com/advisories/27503
- http://secunia.com/advisories/28008
- http://teamforge.net/viewcvs/viewcvs.cgi/tags/release-3.3.9/doc/history.txt?view=markup
- http://www.debian.org/security/2007/dsa-1423
- http://www.gentoo.org/security/en/glsa/glsa-200711-05.xml
- http://www.securityfocus.com/archive/1/482499/100/0/threaded
- http://www.securityfocus.com/bid/26126
- http://www.vupen.com/english/advisories/2007/3768
- https://bugs.gentoo.org/attachment.cgi?id=133465&action=view
- https://bugs.gentoo.org/show_bug.cgi?id=195810
- http://osvdb.org/43760
- http://secunia.com/advisories/27503
- http://secunia.com/advisories/28008
- http://teamforge.net/viewcvs/viewcvs.cgi/tags/release-3.3.9/doc/history.txt?view=markup
- http://www.debian.org/security/2007/dsa-1423
- http://www.gentoo.org/security/en/glsa/glsa-200711-05.xml
- http://www.securityfocus.com/archive/1/482499/100/0/threaded
- http://www.securityfocus.com/bid/26126
- http://www.vupen.com/english/advisories/2007/3768
- https://bugs.gentoo.org/attachment.cgi?id=133465&action=view
- https://bugs.gentoo.org/show_bug.cgi?id=195810