Lucene search

[email protected]CVE-2008-3764

HistoryAug 21, 2008 - 5:41 p.m.

CVE-2008-3764

2008-08-2117:41:00

CWE-94

[email protected]

web.nvd.nist.gov

cve-2008-3764

eval injection

globalsoff.php

turnkey php live helper

remote code execution

nvd

security vulnerability

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.9 High

AI Score

Confidence

Low

0.02 Low

EPSS

Percentile

89.0%

JSON

Eval injection vulnerability in globalsoff.php in Turnkey PHP Live Helper 2.0.1 and earlier allows remote attackers to execute arbitrary PHP code via the test parameter, and probably arbitrary parameters, to chat.php.

Affected configurations

NVD

Node

turnkeywebtoolsphp_live_helperRange≤2.0.1

turnkeywebtoolsphp_live_helperMatch2.0

turnkeywebtoolsphp_live_helperMatch2.0beta_1

turnkeywebtoolsphp_live_helperMatch2.0beta_2

turnkeywebtoolsphp_live_helperMatch2.0beta_3

turnkeywebtoolsphp_live_helperMatch2.0beta_4

turnkeywebtoolsphp_live_helperMatch2.0beta_5

turnkeywebtoolsphp_live_helperMatch2.0beta_6

CPENameOperatorVersion
turnkeywebtools:php_live_helperturnkeywebtools php live helperle2.0.1
turnkeywebtools:php_live_helperturnkeywebtools php live helpereq2.0

CPE	Name	Operator	Version
turnkeywebtools:php_live_helper	turnkeywebtools php live helper	le	2.0.1
turnkeywebtools:php_live_helper	turnkeywebtools php live helper	eq	2.0

References

demos.turnkeywebtools.com/phplivehelper/docs/change_log.txt

secunia.com/advisories/31521

securityreason.com/securityalert/4178

www.gulftech.org/?node=research&article_id=00124-08162008

www.securityfocus.com/archive/1/495542/100/0/threaded

www.securityfocus.com/bid/30729

exchange.xforce.ibmcloud.com/vulnerabilities/44571

www.exploit-db.com/exploits/6261

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.9 High

AI Score

Confidence

Low

0.02 Low

EPSS

Percentile

89.0%

JSON

Related for CVE-2008-3764

cvelist1 nvd1 prion1