CVE-2008-4557

plugins/wacko/highlight/html.php in Strawberry in CuteNews.ru 1.1.1 aka Strawberry allows remote attackers to execute arbitrary PHP code via the text parameter, which is inserted into an executable regular expression...

Immunity Canvas: CUTENEWS_EXEC

Name| cutenewsexec ---|--- CVE| CVE-2008-4557 Exploit Pack| CANVAS Description| cutenews/stawberry Remote Code Execution Notes| CVE Name: CVE-2008-4557 VENDOR: cutenews.ru Repeatability: Infinite References: http://securityreason.pl/exploitalert/3138 CVE Url:...

CVE-2008-4557

CVE-2008-4557 affects CuteNews.ru (Strawberry) 1.1.1, where plugins/wacko/highlight/html.php allows remote attackers to execute arbitrary PHP code by supplying a text parameter that is inserted into an executable regular expression. This is a remote code execution vulnerability; impact is complet...