Vulnerability Details CVE-2007-6550
form.php in PMOS Help Desk 2.4 and earlier sends a redirect to the web browser but does not exit, which allows remote attackers to conduct eval injection attacks and execute arbitrary PHP code via the options array parameter.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.065
EPSS Ranking 90.7%
CVSS Severity
CVSS v2 Score 7.5
References
- http://osvdb.org/42662
- http://secunia.com/advisories/28201
- http://www.securityfocus.com/bid/27032
- http://www.vupen.com/english/advisories/2007/4321
- https://exchange.xforce.ibmcloud.com/vulnerabilities/39274
- https://www.exploit-db.com/exploits/4789
- http://osvdb.org/42662
- http://secunia.com/advisories/28201
- http://www.securityfocus.com/bid/27032
- http://www.vupen.com/english/advisories/2007/4321
- https://exchange.xforce.ibmcloud.com/vulnerabilities/39274
- https://www.exploit-db.com/exploits/4789
Products affected by CVE-2007-6550
-
cpe:2.3:a:pmos_helpdesk:pmos_helpdesk:*