Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 28/12/2007 Updated: 29/09/2017

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

VMScore: 755

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

form.php in PMOS Help Desk 2.4 and previous versions sends a redirect to the web browser but does not exit, which allows remote malicious users to conduct eval injection attacks and execute arbitrary PHP code via the options array parameter.

Vulnerable Product	Search on Vulmon	Subscribe to Product
pmos helpdesk pmos helpdesk

<?php /* ------------------------------------------------------ PMOS Help Desk <= 24 Remote Command Execution Exploit ------------------------------------------------------ author: EgiX mail: n0b0d13s[at]gmail[dot]com link: wwwh2deskcom/pmos dork: "Powered by PMOS Help Desk" [-] PHP code injection th ...

CWE-94 http://www.securityfocus.com/bid/27032 http://secunia.com/advisories/28201 http://osvdb.org/42662 http://www.vupen.com/english/advisories/2007/4321 https://exchange.xforce.ibmcloud.com/vulnerabilities/39274 https://www.exploit-db.com/exploits/4789 https://nvd.nist.gov https://www.exploit-db.com/exploits/4789/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2007-6550

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect