CVEvulnerability

CVE-2007-5453

8.5 HIGH Published 2007-10-14 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2007-10-14
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
8.5 HIGH — AV:N/AC:M/Au:S/C:C/I:C/A:C
Weaknesses
CWE-94

Description

Multiple eval injection vulnerabilities in Php-Stats 0.1.9.2 allow remote authenticated administrators to execute arbitrary code by writing PHP sequences to the php-stats-options record in the _options table, which is used in an eval function call by (1) admin.php, (2) click.php, (3) download.php, and unspecified other files, as demonstrated by modifying _options through a backup restore action in admin.php.

Affected configurations

• php-stats php-stats 0.1.9.2

Related

Weakness · CWE (1)

  • CWE-94 Improper Control of Generation of Code weakness

References