CVE-2007-4454: Olate Olatedownload

Medium severity, CVSS 6.8. EPSS: 2.3% chance of exploitation in the next 30 days.

Eval injection vulnerability in environment.php in Olate Download (od) 3.4.1 allows context-dependent attackers to execute arbitrary code via a crafted version string, as referenced by the (1) PDO::ATTR_SERVER_VERSION or (2) PDO::ATTR_CLIENT_VERSION attribute.

Affected products

• Olate Olatedownload: version 3.4.1 only

Published 2007-08-21. Last modified 2026-06-16.