Intrusion PreventionCMS.Made.Simple.last.module.Command.Injection
Description
This indicates a vulnerability in CMS Made Simple. This vulnerability is caused by an error when the vulnerable software handles a "last_module" parameter passed to an "eval()" call in "lib/adodb_lite/adodb-perf-module.inc.php". It allows remote attackers to execute arbitrary commands.
Affected Products
CMS Made Simple version 1.1.3.1 and prior.
Impact
System compromise, remote command execution.
Recommended Actions
Currently we are not aware of any official fix for this issue.
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
| ID | 15087 |
| Created | Oct 18, 2007 |
| Updated | Mar 06, 2023 |
| Risk |
|
| CVE ID | CVE-2007-5056 |
| Exploit Prediction Score | 72.2% |
| Default Action | drop |
| Active | |
| Affected OS | Windows, Linux, BSD, Solaris, MacOS |
| Affected App | PHP_app |