CVE-2007-0535

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

Multiple eval injection vulnerabilities in Vote! Pro 4.0, and possibly earlier, allow remote attackers to execute arbitrary code via requests to unspecified PHP scripts with the poll_id parameter, which is supplied to eval function calls, a different set of vectors than CVE-2007-0504. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

No affected versions have been published.

Timeline

Published
Jan 26, 2007
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2007

CVE-2007-05367.2The chroot helper in rMake for rPath Linux 1 does not drop supplemental groups, which causes packages to be installed with insecure permissiCVE-2007-05372.6The KDE HTML library (kdelibs), as used by Konqueror 3.5.5, does not properly parse HTML comments, which allows remote attackers to conduct CVE-2007-05385.0Telligent Community Server 2.1 and earlier allows remote attackers to cause a denial of service (bandwidth or thread consumption) via pingbaCVE-2007-05397.8The wp_remote_fopen function in WordPress before 2.1 allows remote attackers to cause a denial of service (bandwidth or thread consumption) CVE-2007-05405.0WordPress allows remote attackers to cause a denial of service (bandwidth or thread consumption) via pingback service calls with a source URCVE-2007-05415.0WordPress allows remote attackers to determine the existence of arbitrary files, and possibly read portions of certain files, via pingback sCVE-2007-05426.8Cross-site scripting (XSS) vulnerability in show.php in 212cafe Guestbook 4.00 beta allows remote attackers to inject arbitrary web script oCVE-2007-05439.4ZixForum 1.14 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers toCVE-2007-05446.0Cross-site scripting (XSS) vulnerability in private.php in MyBB (aka MyBulletinBoard) allows remote authenticated users to inject arbitrary CVE-2007-05457.8Maxtricity Tagger 0.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to dowCVE-2007-05467.8Toxiclab Shoutbox 1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to downlCVE-2007-05474.3Cross-site scripting (XSS) vulnerability in CGI-RESCUE WebFORM 4.3 and earlier allows remote attackers to inject arbitrary web script or HTM
CVE-2007-0535: High severity, CVSS 7.5 | Vulnix