Code injection

2008-10-1422:36:00

PRIOn knowledge base

www.prio-n.com

8.1 High

AI Score

Confidence

Low

0.045 Low

EPSS

Percentile

92.5%

JSON

plugins/wacko/highlight/html.php in Strawberry in CuteNews.ru 1.1.1 (aka Strawberry) allows remote attackers to execute arbitrary PHP code via the text parameter, which is inserted into an executable regular expression.

CPENameOperatorVersion
cutenewseq1.1.1

CPE	Name	Operator	Version
	cutenews	eq	1.1.1

References

secunia.com/advisories/28330

securityreason.com/securityalert/4403

www.osvdb.org/40236

exchange.xforce.ibmcloud.com/vulnerabilities/39450

www.exploit-db.com/exploits/4851