CVE-2008-6132

EPSS 26.3%

Eval injection vulnerability in reserve.php in phpScheduleIt 1.2.10 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary PHP code via the start_date parameter.

Affected products

n/a · n/a

public PoCs found — 4

cve_referencewww.exploit-db.com/exploits/18037unverified cve_referencewww.exploit-db.com/exploits/6646unverified exploitdbwww.exploit-db.com/exploits/18037unverified exploitdbwww.exploit-db.com/exploits/6646unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://phpscheduleit.svn.sourceforge.net/viewvc/phpscheduleit/1.2.11/reserve.php?r1=318&r2=328 http://secunia.com/advisories/32073 https://exchange.xforce.ibmcloud.com/vulnerabilities/45617 http://sourceforge.net/project/shownotes.php?release_id=662749 http://www.exploit-db.com/exploits/18037 http://www.exploit-db.com/exploits/6646 http://www.osvdb.org/48797 http://www.securityfocus.com/bid/31520