cve/2008/CVE-2008-4557.md

CVE-2008-4557

Description

plugins/wacko/highlight/html.php in Strawberry in CuteNews.ru 1.1.1 (aka Strawberry) allows remote attackers to execute arbitrary PHP code via the text parameter, which is inserted into an executable regular expression.

POC

Reference

• http://securityreason.com/securityalert/4403
• https://www.exploit-db.com/exploits/4851

Github

No PoCs found on GitHub currently.