Vulnerabilities > Cutephp > Cutenews > 1.1.1

DATE CVE VULNERABILITY TITLE RISK
2008-10-14 CVE-2008-4557 Code Injection vulnerability in Cutephp Cutenews 1.1.1
plugins/wacko/highlight/html.php in Strawberry in CuteNews.ru 1.1.1 (aka Strawberry) allows remote attackers to execute arbitrary PHP code via the text parameter, which is inserted into an executable regular expression.
network
low complexity
cutephp CWE-94
critical
10.0