Launchpad CVE tracker

CVE 2007-5423

tiki-graph_formula.php in TikiWiki 1.9.8 allows remote attackers to execute arbitrary code via PHP sequences in the f array parameter, which are processed by create_function.

Related bugs and status

CVE-2007-5423 (Candidate) is related to these bugs:

Bug #163833: [tikiwiki] Multiple vulnerabilities possibly resulting in the remote execution of arbitrary code

		In	Importance	Status
163833	[tikiwiki] Multiple vulnerabilities possibly resulting in the remote execution of arbitrary code	tikiwiki (Ubuntu)	Undecided	Fix Released
163833	[tikiwiki] Multiple vulnerabilities possibly resulting in the remote execution of arbitrary code	tikiwiki (Ubuntu Feisty)	Undecided	Fix Released
163833	[tikiwiki] Multiple vulnerabilities possibly resulting in the remote execution of arbitrary code	tikiwiki (Ubuntu Gutsy)	Undecided	Fix Released
163833	[tikiwiki] Multiple vulnerabilities possibly resulting in the remote execution of arbitrary code	tikiwiki (Ubuntu Hardy)	Undecided	Fix Released

See the

CVE page on Mitre.org for more details.

Launchpad.net

CVE 2007-5423

References