Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2009-0820

Опубликовано: 05 мар. 2009
Источник: nvd
CVSS2: 7.5
EPSS Низкий

Описание

Multiple eval injection vulnerabilities in phpScheduleIt before 1.2.11 allow remote attackers to execute arbitrary code via (1) the end_date parameter to reserve.php and (2) the start_date and end_date parameters to check.php. NOTE: the start_date/reserve.php vector is already covered by CVE-2008-6132.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:php.brickhost:phpscheduleit:*:*:*:*:*:*:*:*
Версия до 1.2.10 (включая)
cpe:2.3:a:php.brickhost:phpscheduleit:1.0:*:*:*:*:*:*:*
cpe:2.3:a:php.brickhost:phpscheduleit:1.0.0rc1:*:*:*:*:*:*:*
cpe:2.3:a:php.brickhost:phpscheduleit:1.0_rc1:*:*:*:*:*:*:*
cpe:2.3:a:php.brickhost:phpscheduleit:1.2.0:*:*:*:*:*:*:*
cpe:2.3:a:php.brickhost:phpscheduleit:1.2.0:beta:*:*:*:*:*:*
cpe:2.3:a:php.brickhost:phpscheduleit:1.2.0:rc1:*:*:*:*:*:*
cpe:2.3:a:php.brickhost:phpscheduleit:1.2.1:*:*:*:*:*:*:*
cpe:2.3:a:php.brickhost:phpscheduleit:1.2.2:*:*:*:*:*:*:*
cpe:2.3:a:php.brickhost:phpscheduleit:1.2.3:*:*:*:*:*:*:*
cpe:2.3:a:php.brickhost:phpscheduleit:1.2.4:*:*:*:*:*:*:*
cpe:2.3:a:php.brickhost:phpscheduleit:1.2.5:*:*:*:*:*:*:*
cpe:2.3:a:php.brickhost:phpscheduleit:1.2.6:*:*:*:*:*:*:*
cpe:2.3:a:php.brickhost:phpscheduleit:1.2.7:*:*:*:*:*:*:*
cpe:2.3:a:php.brickhost:phpscheduleit:1.2.8:*:*:*:*:*:*:*
cpe:2.3:a:php.brickhost:phpscheduleit:1.2.9:*:*:*:*:*:*:*

EPSS

Процентиль: 91%
0.06415
Низкий

7.5 High

CVSS2

Дефекты

CWE-94

Связанные уязвимости

github логотип

GHSA-6vj2-4wv8-fm3g

github
почти 4 года назад

Multiple eval injection vulnerabilities in phpScheduleIt before 1.2.11 allow remote attackers to execute arbitrary code via (1) the end_date parameter to reserve.php and (2) the start_date and end_date parameters to check.php. NOTE: the start_date/reserve.php vector is already covered by CVE-2008-6132.

EPSS

Процентиль: 91%
0.06415
Низкий

7.5 High

CVSS2

Дефекты

CWE-94