Description
Eval injection vulnerability in codepress.html in CodePress before 0.9.4 allows remote attackers to execute arbitrary code via certain input that is used in an eval function call.
References
- http://sourceforge.net/project/shownotes.php?release_id=505510
- 25124 third-party-advisory
- 36484 vdb-entry
- http://codepress.sourceforge.net/changelog.php
- codepress-codepress-xss(34055) vdb-entry
- ADV-2007-1638 vdb-entry
- 23788 vdb-entry