CVE-2007-2141

None

CVSS

—

EPSS

45.8%

Published

Apr 19, 2007

CISA due date

—

The record

Direct static code injection vulnerability in shoutbox.php in ShoutPro 1.5.2 allows remote attackers to inject arbitrary PHP code into shouts.php via the shout parameter.

Affected packages

Ecosystem	Package	Introduced	Fixed