The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Dynamic code evaluation vulnerability in tests/tmssql.php test script in ADOdb for PHP before 4.70, as used in multiple products including (1) Mantis, (2) PostNuke, (3) Moodle, (4) Cacti, (5) Xaraya, (6) PhpOpenChat, possibly (7) MAXdev MD-Pro, and (8) Simplog, allows remote attackers to execute arbitrary PHP functions via the do parameter, which is saved in a variable that is then executed as a function, as demonstrated using phpinfo.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade cactiUpgrade libphp-adodb | Jul 30, 2024 | Jan 9, 2006 |
| Gentoo Linux | — | Upgrade net-analyzer/cacti. | Oct 30, 2017 | Jan 9, 2006 |
| Moodle | — | Upgrade to the latest version of Moodle | Nov 7, 2019 | Jan 9, 2006 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub