Lucene search

[email protected]CVE-2008-6132

HistoryFeb 13, 2009 - 6:30 p.m.

CVE-2008-6132

2009-02-1318:30:04

CWE-94

[email protected]

web.nvd.nist.gov

cve-2008-6132

eval injection

reserve.php

phpscheduleit

security vulnerability

nvd

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7.8 High

AI Score

Confidence

Low

0.828 High

EPSS

Percentile

98.5%

JSON

Eval injection vulnerability in reserve.php in phpScheduleIt 1.2.10 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary PHP code via the start_date parameter.

Affected configurations

NVD

Node

brickhostphpscheduleitRange≤1.2.10

brickhostphpscheduleitMatch1.0

brickhostphpscheduleitMatch1.0.0rc1

brickhostphpscheduleitMatch1.0_rc1

brickhostphpscheduleitMatch1.2.0

brickhostphpscheduleitMatch1.2.0beta

brickhostphpscheduleitMatch1.2.0rc1

brickhostphpscheduleitMatch1.2.1

brickhostphpscheduleitMatch1.2.2

brickhostphpscheduleitMatch1.2.3

brickhostphpscheduleitMatch1.2.4

brickhostphpscheduleitMatch1.2.5

brickhostphpscheduleitMatch1.2.6

brickhostphpscheduleitMatch1.2.7

brickhostphpscheduleitMatch1.2.8

brickhostphpscheduleitMatch1.2.9

CPENameOperatorVersion
brickhost:phpscheduleitbrickhost phpscheduleitle1.2.10
brickhost:phpscheduleitbrickhost phpscheduleiteq1.0
brickhost:phpscheduleitbrickhost phpscheduleiteq1.0.0rc1
brickhost:phpscheduleitbrickhost phpscheduleiteq1.0_rc1
brickhost:phpscheduleitbrickhost phpscheduleiteq1.2.0
brickhost:phpscheduleitbrickhost phpscheduleiteq1.2.1
brickhost:phpscheduleitbrickhost phpscheduleiteq1.2.2
brickhost:phpscheduleitbrickhost phpscheduleiteq1.2.3
brickhost:phpscheduleitbrickhost phpscheduleiteq1.2.4
brickhost:phpscheduleitbrickhost phpscheduleiteq1.2.5

CPE	Name	Operator	Version
brickhost:phpscheduleit	brickhost phpscheduleit	le	1.2.10
brickhost:phpscheduleit	brickhost phpscheduleit	eq	1.0
brickhost:phpscheduleit	brickhost phpscheduleit	eq	1.0.0rc1
brickhost:phpscheduleit	brickhost phpscheduleit	eq	1.0_rc1
brickhost:phpscheduleit	brickhost phpscheduleit	eq	1.2.0
brickhost:phpscheduleit	brickhost phpscheduleit	eq	1.2.1
brickhost:phpscheduleit	brickhost phpscheduleit	eq	1.2.2
brickhost:phpscheduleit	brickhost phpscheduleit	eq	1.2.3
brickhost:phpscheduleit	brickhost phpscheduleit	eq	1.2.4
brickhost:phpscheduleit	brickhost phpscheduleit	eq	1.2.5