# CVE-2007-5693

> As of 2024-08-07, CVE-2007-5693 is a vulnerability, EPSS 5.0% (92.1th percentile). Threadlinqs Intelligence links 1 tracked threat campaign to CVE-2007-5693, most recently “TuxBot v3 Evolution: LLM-Assisted IoT Botnet Framework With a Broken Multi-CVE Exploit Chain”.

**Last updated:** 2024-08-07

## What is CVE-2007-5693?

Eval injection vulnerability in the translation module (translator.php) in SiteBar 3.3.8 allows remote authenticated users to execute arbitrary PHP code via the edit parameter in an upd cmd action, a different vulnerability than CVE-2007-5492.

The identifier was first published 6939 days ago.

## Severity and exploitation probability

- **EPSS (FIRST):** 5.0% probability of exploitation in the next 30 days, higher than 92.1% of all scored CVEs
- **CISA KEV:** Not listed in the CISA Known Exploited Vulnerabilities catalog
- **Threadlinqs priority:** 3.7/10 — a Threadlinqs composite of the CVSS base score, the EPSS percentile and public exploit availability
- **Published:** 2007-10-29, last modified 2024-08-07

## Is CVE-2007-5693 being exploited?

It currently carries a trending score of 28 in the Threadlinqs vulnerability feed.

## Affected products and versions

No affected-product or package list has been recorded for CVE-2007-5693 in the tracked sources. The vendor advisory and the references below are the authoritative statement of what is affected.

## How to fix CVE-2007-5693

No vendor patch reference has been recorded for CVE-2007-5693 in the tracked sources. Follow the references below for a fix, and treat any affected deployment as exposed until the vendor states otherwise.

## Threat activity tracking CVE-2007-5693

1 tracked threat in the Threadlinqs corpus references CVE-2007-5693, either in the campaign’s CVE list or as an indicator on the campaign record.

- [TuxBot v3 Evolution: LLM-Assisted IoT Botnet Framework With a Broken Multi-CVE Exploit Chain](https://intel.threadlinqs.com/threat/TL-2026-1366) — HIGH · 2026-07-15

## Sources

Enriched from CVE.org, FIRST EPSS. Last verified by Threadlinqs on 2026-10-10.

**Vendor advisory and patch**

- [gentoo.org — vendor advisory](http://www.gentoo.org/security/en/glsa/glsa-200711-05.xml)
- [teamforge.net](http://teamforge.net/viewcvs/viewcvs.cgi/tags/release-3.3.9/doc/history.txt?view=markup)
- [debian.org — vendor advisory](http://www.debian.org/security/2007/dsa-1423)

**Third-party advisory**

- [secunia.com — third party advisory](http://secunia.com/advisories/27503)
- [securityreason.com — third party advisory](http://securityreason.com/securityalert/3318)
- [secunia.com — third party advisory (28008)](http://secunia.com/advisories/28008)

**Vulnerability database entry**

- [osvdb.org — vdb entry](http://osvdb.org/43604)
- [securityfocus.com — vdb entry](http://www.securityfocus.com/bid/26126)
- [vupen.com — vdb entry](http://www.vupen.com/english/advisories/2007/3768)

**Mailing list and disclosure**

- [securityfocus.com — mailing list](http://www.securityfocus.com/archive/1/482499/100/0/threaded)

Canonical: https://intel.threadlinqs.com/cve/CVE-2007-5693
Full detection coverage and IOCs for threats exploiting CVE-2007-5693 via the Threadlinqs MCP server (Purple tier): https://intel.threadlinqs.com/mcp