CVE-2008-4557

  • Last update: Apr 13, 2023

Description

plugins/wacko/highlight/html.php in Strawberry in CuteNews.ru 1.1.1 (aka Strawberry) allows remote attackers to execute arbitrary PHP code via the text parameter, which is inserted into an executable regular expression.

Software From Fixed in
cutephp / cutenews 1.1.1 1.1.1.x

Details

    • Severity: High
  • CVE: CVE-2008-4557
  • Published: Oct 15, 2008
  • Updated: Apr 13, 2023
  • Exploit:

CVSS v2

  • Severity: High
  • Score: 10
  • AV:N/AC:L/Au:N/C:C/I:C/A:C

CWEs