CVE-2007-6550
form.php in PMOS Help Desk 2.4 and earlier sends a redirect to the web browser but does not exit,...
form.php in PMOS Help Desk 2.4 and earlier sends a redirect to the web browser but does not exit, which allows remote attackers to conduct eval injection attacks and execute arbitrary PHP code via the options array parameter.
Exploit likelihood
What each source reports
NVD Score used
form.php in PMOS Help Desk 2.4 and earlier sends a redirect to the web browser but does not exit, which allows remote attackers to conduct eval injection attacks and execute arbitrary PHP code via the options array parameter.
- Record
CVE-2007-6550- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-94
- Updated
- 2026-11-02
CVE List No score
form.php in PMOS Help Desk 2.4 and earlier sends a redirect to the web browser but does not exit, which allows remote attackers to conduct eval injection attacks and execute arbitrary PHP code via the options array parameter.
- Record
CVE-2007-6550- Updated
- 2026-11-02
EUVDEUVD-2007-6516 No score
form.php in PMOS Help Desk 2.4 and earlier sends a redirect to the web browser but does not exit, which allows remote attackers to conduct eval injection attacks and execute arbitrary PHP code via the options array parameter.
- Record
EUVD-2007-6516- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-jx5h-g783-88p7 No score
form.php in PMOS Help Desk 2.4 and earlier sends a redirect to the web browser but does not exit,...
form.php in PMOS Help Desk 2.4 and earlier sends a redirect to the web browser but does not exit, which allows remote attackers to conduct eval injection attacks and execute arbitrary PHP code via the options array parameter.
- Record
GHSA-jx5h-g783-88p7- Weakness
- CWE-94
- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | PMOS Help Desk 2.4 - Remote Command Execution | 2007-12-25 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| aliases, exploits, facts, references, title | Exploit-DB, GitHub Advisories | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-6550 is a high vulnerability (CVSS 7.5) in Pmos Helpdesk Helpdesk, published December 28, 2007. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 6.84%, the 94th percentile. No source names a fixed version.