CVE ID:	CVE-2007-5423
Description:	tiki-graph_formula.php in TikiWiki 1.9.8 allows remote attackers to execute arbitrary code via PHP sequences in the f array parameter, which are processed by create_function.
Test IDs:	1.3.6.1.4.1.25623.1.0.58700
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2007-5423 BugTraq ID: 26006 http://www.securityfocus.com/bid/26006 Bugtraq: 20071010 Vulnerabilities digest (Google Search) http://www.securityfocus.com/archive/1/482006/100/0/threaded Bugtraq: 20071011 Tikiwiki 1.9.8 exploit ITW (Google Search) http://www.securityfocus.com/archive/1/482128/100/0/threaded https://www.exploit-db.com/exploits/4509 http://www.gentoo.org/security/en/glsa/glsa-200710-21.xml http://bugs.gentoo.org/show_bug.cgi?id=195503 http://securityvulns.ru/Sdocument162.html http://osvdb.org/40478 http://secunia.com/advisories/27190 http://secunia.com/advisories/27344 http://securityreason.com/securityalert/3216 http://www.vupen.com/english/advisories/2007/3492 XForce ISS Database: tikiwiki-tikigraphformula-command-execution(37076) https://exchange.xforce.ibmcloud.com/vulnerabilities/37076