Unscored severity · published Apr 19, 2007
CVE-2007-2141
Direct static code injection vulnerability in shoutbox.php in ShoutPro 1.5.2 allows remote attackers to inject arbitrary PHP code into shouts.php via the shout parameter
–
CVSS
45.8%
EPSS
No
On KEV
Description
Direct static code injection vulnerability in shoutbox.php in ShoutPro 1.5.2 allows remote attackers to inject arbitrary PHP code into shouts.php via the shout parameter.
Exploitation
Is it being used?
Exploit prediction (EPSS)45.8% · higher than 99% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SH
Shoutpro · Shoutpro
through 1.5.2 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-2141
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-2141
osvdb.org
http://osvdb.org/34999
secunia.com
http://secunia.com/advisories/24939
securityreason.com
http://securityreason.com/securityalert/2593
www.securityfocus.com
http://www.securityfocus.com/archive/1/466037/100/0/threaded
Exploit
http://www.securityfocus.com/bid/23542
www.vupen.com
http://www.vupen.com/english/advisories/2007/1432
More from Shoutpro
–
CVE-2006-7047
include.php in Shoutpro 1.0 might allow remote attackers to bypass IP ban restrictions via a URL in the path parameter that points to an alternate bannedips.php file