CVE-2008-4557: Cutephp Cutenews

High severity, CVSS 10.0. EPSS: 45.3% chance of exploitation in the next 30 days.

plugins/wacko/highlight/html.php in Strawberry in CuteNews.ru 1.1.1 (aka Strawberry) allows remote attackers to execute arbitrary PHP code via the text parameter, which is inserted into an executable regular expression.

Affected products

• Cutephp Cutenews: version 1.1.1 only

Published 2008-10-14. Last modified 2026-06-16.