CVE-2007-5056

Eval injection vulnerability in adodb-perf-module.inc.php in ADOdb Lite 1.42 and earlier, as used in products including CMS Made Simple, SAPID CMF, Journalness, PacerCMS, and Open-Realty, allows remote attackers to execute arbitrary code via PHP sequences in the last_module parameter.

• CWE-94

• http://osvdb.org/40596
• http://osvdb.org/41422
• http://osvdb.org/41426
• http://osvdb.org/41427
• http://osvdb.org/41428
• http://secunia.com/advisories/26928Vendor Advisory
• http://secunia.com/advisories/28859Vendor Advisory
• http://secunia.com/advisories/28873Vendor Advisory
• http://secunia.com/advisories/28874Vendor Advisory
• http://secunia.com/advisories/28886Vendor Advisory
• http://www.attrition.org/pipermail/vim/2007-September/001800.htmlExploit
• http://www.securityfocus.com/bid/25768
• http://www.vupen.com/english/advisories/2007/3261
• https://exchange.xforce.ibmcloud.com/vulnerabilities/36733
• https://exchange.xforce.ibmcloud.com/vulnerabilities/40389
• https://exchange.xforce.ibmcloud.com/vulnerabilities/40393
• https://exchange.xforce.ibmcloud.com/vulnerabilities/40395
• https://exchange.xforce.ibmcloud.com/vulnerabilities/40396
• https://www.exploit-db.com/exploits/4442
• https://www.exploit-db.com/exploits/5090
• https://www.exploit-db.com/exploits/5091
• https://www.exploit-db.com/exploits/5097
• https://www.exploit-db.com/exploits/5098
• http://osvdb.org/40596
• http://osvdb.org/41422
• http://osvdb.org/41426
• http://osvdb.org/41427
• http://osvdb.org/41428
• http://secunia.com/advisories/26928Vendor Advisory
• http://secunia.com/advisories/28859Vendor Advisory
• http://secunia.com/advisories/28873Vendor Advisory
• http://secunia.com/advisories/28874Vendor Advisory
• http://secunia.com/advisories/28886Vendor Advisory
• http://www.attrition.org/pipermail/vim/2007-September/001800.htmlExploit
• http://www.securityfocus.com/bid/25768
• http://www.vupen.com/english/advisories/2007/3261
• https://exchange.xforce.ibmcloud.com/vulnerabilities/36733
• https://exchange.xforce.ibmcloud.com/vulnerabilities/40389
• https://exchange.xforce.ibmcloud.com/vulnerabilities/40393
• https://exchange.xforce.ibmcloud.com/vulnerabilities/40395
• https://exchange.xforce.ibmcloud.com/vulnerabilities/40396
• https://www.exploit-db.com/exploits/4442
• https://www.exploit-db.com/exploits/5090
• https://www.exploit-db.com/exploits/5091
• https://www.exploit-db.com/exploits/5097
• https://www.exploit-db.com/exploits/5098

Published

Sep 24, 2007

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2007-5050Directory traversal vulnerability in index.php in Neuron New…
• CVE-2007-5051Multiple cross-site scripting (XSS) vulnerabilities in PhpGe…
• CVE-2007-5052Multiple cross-site scripting (XSS) vulnerabilities in index…
• CVE-2007-5053Multiple incomplete blacklist vulnerabilities in iziContents…
• CVE-2007-5054Multiple PHP remote file inclusion vulnerabilities in iziCon…
• CVE-2007-5055Multiple directory traversal vulnerabilities in iziContents …
• CVE-2007-5057NetSupport Manager Client before 10.20.0004 allows remote at…
• CVE-2007-5058Cross-site scripting (XSS) vulnerability in the Web administ…
• CVE-2007-5059Multiple cross-site scripting (XSS) vulnerabilities in Green…
• CVE-2007-5060Cross-site request forgery (CSRF) vulnerability in the cpass…
• CVE-2007-5061SQL injection vulnerability in mods/banners/navlist.php in C…
• CVE-2007-5062account.php in Adam Scheinberg Flip 3.0 and earlier allows r…