CVE-2007-2501

Published: May 4, 2007Modified: Apr 23, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Eval injection vulnerability in codepress.html in CodePress before 0.9.4 allows remote attackers to execute arbitrary code via certain input that is used in an eval function call.

Affected (1)

Products: Fernando M.a.d.s.: Codepress

Fernando M.a.d.s.

1 product

Codepress

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Fernando M.a.d.s. Codepress	version ≤ 0.9.3

References (14)

http://codepress.sourceforge.net/changelog.php

Source: cve@mitre.org

Patch

http://osvdb.org/36484

Source: cve@mitre.org

http://secunia.com/advisories/25124

Source: cve@mitre.org

PatchVendor Advisory

http://sourceforge.net/project/shownotes.php?release_id=505510

Source: cve@mitre.org

http://www.securityfocus.com/bid/23788

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2007/1638

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/34055

Source: cve@mitre.org

http://codepress.sourceforge.net/changelog.php