CVE-2009-0820

2009-03-0502:30:00

CWE-94

[email protected]

web.nvd.nist.gov

phpscheduleit

eval injection

remote code execution

cve-2009-0820

8.1 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.057 Low

EPSS

Percentile

93.3%

JSON

Multiple eval injection vulnerabilities in phpScheduleIt before 1.2.11 allow remote attackers to execute arbitrary code via (1) the end_date parameter to reserve.php and (2) the start_date and end_date parameters to check.php. NOTE: the start_date/reserve.php vector is already covered by CVE-2008-6132.

CPENameOperatorVersion
php.brickhost:phpscheduleitphp.brickhost phpscheduleiteq1.2.0
php.brickhost:phpscheduleitphp.brickhost phpscheduleiteq1.2.3
php.brickhost:phpscheduleitphp.brickhost phpscheduleiteq1.2.4
php.brickhost:phpscheduleitphp.brickhost phpscheduleiteq1.2.2
php.brickhost:phpscheduleitphp.brickhost phpscheduleiteq1.2.6
php.brickhost:phpscheduleitphp.brickhost phpscheduleiteq1.0_rc1
php.brickhost:phpscheduleitphp.brickhost phpscheduleiteq1.2.5
php.brickhost:phpscheduleitphp.brickhost phpscheduleitle1.2.10
php.brickhost:phpscheduleitphp.brickhost phpscheduleiteq1.2.7
php.brickhost:phpscheduleitphp.brickhost phpscheduleiteq1.0

CPE	Name	Operator	Version
php.brickhost:phpscheduleit	php.brickhost phpscheduleit	eq	1.2.0
php.brickhost:phpscheduleit	php.brickhost phpscheduleit	eq	1.2.3
php.brickhost:phpscheduleit	php.brickhost phpscheduleit	eq	1.2.4
php.brickhost:phpscheduleit	php.brickhost phpscheduleit	eq	1.2.2
php.brickhost:phpscheduleit	php.brickhost phpscheduleit	eq	1.2.6
php.brickhost:phpscheduleit	php.brickhost phpscheduleit	eq	1.0_rc1
php.brickhost:phpscheduleit	php.brickhost phpscheduleit	eq	1.2.5
php.brickhost:phpscheduleit	php.brickhost phpscheduleit	le	1.2.10
php.brickhost:phpscheduleit	php.brickhost phpscheduleit	eq	1.2.7
php.brickhost:phpscheduleit	php.brickhost phpscheduleit	eq	1.0