Lucene search
HistoryNov 14, 2008 - 6:07 p.m.
CVE-2008-5071
CVSS2
9
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:S/C:C/I:C/A:C
AI Score
7.6
Confidence
Low
EPSS
0.007
Percentile
80.6%
Multiple eval injection vulnerabilities in itpm_estimate.php in Yoxel 1.23beta and earlier allow remote authenticated users to execute arbitrary PHP code via the proj_id parameter.
Affected configurations
Node
yoxelyoxelRange≤1.23beta
ORyoxelyoxelMatch1.06beta
ORyoxelyoxelMatch1.07beta
ORyoxelyoxelMatch1.08beta
ORyoxelyoxelMatch1.09beta
ORyoxelyoxelMatch1.10beta
ORyoxelyoxelMatch1.11beta
ORyoxelyoxelMatch1.12beta
ORyoxelyoxelMatch1.13beta
ORyoxelyoxelMatch1.14beta
ORyoxelyoxelMatch1.15beta
ORyoxelyoxelMatch1.16beta
ORyoxelyoxelMatch1.17beta
ORyoxelyoxelMatch1.18beta
ORyoxelyoxelMatch1.19beta
ORyoxelyoxelMatch1.20
ORyoxelyoxelMatch1.20beta
ORyoxelyoxelMatch1.21
ORyoxelyoxelMatch1.21beta
ORyoxelyoxelMatch1.22
ORyoxelyoxelMatch1.22beta
| Vendor | Product | Version | CPE |
|---|---|---|---|
| yoxel | yoxel | * | cpe:2.3:a:yoxel:yoxel:*:*:*:*:*:*:*:* |
| yoxel | yoxel | 1.06beta | cpe:2.3:a:yoxel:yoxel:1.06beta:*:*:*:*:*:*:* |
| yoxel | yoxel | 1.07beta | cpe:2.3:a:yoxel:yoxel:1.07beta:*:*:*:*:*:*:* |
| yoxel | yoxel | 1.08beta | cpe:2.3:a:yoxel:yoxel:1.08beta:*:*:*:*:*:*:* |
| yoxel | yoxel | 1.09beta | cpe:2.3:a:yoxel:yoxel:1.09beta:*:*:*:*:*:*:* |
| yoxel | yoxel | 1.10beta | cpe:2.3:a:yoxel:yoxel:1.10beta:*:*:*:*:*:*:* |
| yoxel | yoxel | 1.11beta | cpe:2.3:a:yoxel:yoxel:1.11beta:*:*:*:*:*:*:* |
| yoxel | yoxel | 1.12beta | cpe:2.3:a:yoxel:yoxel:1.12beta:*:*:*:*:*:*:* |
| yoxel | yoxel | 1.13beta | cpe:2.3:a:yoxel:yoxel:1.13beta:*:*:*:*:*:*:* |
| yoxel | yoxel | 1.14beta | cpe:2.3:a:yoxel:yoxel:1.14beta:*:*:*:*:*:*:* |
Related
cve
cve
CVE-2008-5071
2008-11-14 18:07:59
prion
prion
Sql injection
2008-11-14 18:07:00
cvelist
cvelist
CVE-2008-5071
2008-11-14 16:00:00
exploitdb
exploitdb
Yoxel 1.23beta - 'itpm_estimate.php' Remote Code Execution
2008-09-27 00:00:00
CVSS2
9
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:S/C:C/I:C/A:C
AI Score
7.6
Confidence
Low
EPSS
0.007
Percentile
80.6%
Related for NVD:CVE-2008-5071