Unscored severity · published Dec 28, 2007
CVE-2007-6550
form.php in PMOS Help Desk 2.4 and earlier sends a redirect to the web browser but does not exit, which allows remote attackers to conduct eval injection attacks and execute…
–
CVSS
6.8%
EPSS
No
On KEV
Description
form.php in PMOS Help Desk 2.4 and earlier sends a redirect to the web browser but does not exit, which allows remote attackers to conduct eval injection attacks and execute arbitrary PHP code via the options array parameter.
Exploitation
Is it being used?
Exploit prediction (EPSS)6.8% · higher than 94% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PH
Pmos Helpdesk · Pmos Helpdesk
through 2.4 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-6550
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-6550
osvdb.org
http://osvdb.org/42662
secunia.com
http://secunia.com/advisories/28201
www.securityfocus.com
http://www.securityfocus.com/bid/27032
www.vupen.com
http://www.vupen.com/english/advisories/2007/4321
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/39274
www.exploit-db.com
https://www.exploit-db.com/exploits/4789
More from Pmos Helpdesk
–
CVE-2006-6158
Multiple cross-site scripting (XSS) vulnerabilities in (a) PMOS Help Desk 2.4, formerly (b) InverseFlow Help Desk 2.31 and also sold as (c) Ace Helpdesk 2.31, allow remote…