Php Live Helper@2.0 Security Vulnerabilities and Issues — Php Live Helper@2.0 CVE List

Lucene search

TurnkeywebtoolsPhp Live Helper2.0

3 matches found

CVE•added 2008/08/21 5:41 p.m.•36 views

CVE-2008-3763

Variable overwrite vulnerability in libsecure.php in Turnkey PHP Live Helper 2.0.1 and earlier, when register_globals is enabled, allows remote attackers to overwrite arbitrary variables related to the db config file. NOTE: this can be leveraged for code injection by overwriting the language file.

6.8CVSS7.3AI score0.09114EPSS

CVE•added 2008/08/21 5:41 p.m.•32 views

CVE-2008-3762

SQL injection vulnerability in onlinestatus_html.php in Turnkey PHP Live Helper 2.0.1 and earlier allows remote attackers to execute arbitrary SQL commands via the dep parameter, related to lack of input sanitization in the get function in global.php.

7.5CVSS8.5AI score0.00777EPSS

CVE•added 2008/08/21 5:41 p.m.•29 views

CVE-2008-3764

Eval injection vulnerability in globalsoff.php in Turnkey PHP Live Helper 2.0.1 and earlier allows remote attackers to execute arbitrary PHP code via the test parameter, and probably arbitrary parameters, to chat.php.

7.5CVSS7.9AI score0.07342EPSS