NVD

Id
47849  
Name
CVE-2009-0517  
Description
Eval injection vulnerability in index.php in phpSlash 0.8.1.1 and earlier allows remote attackers to execute arbitrary PHP code via the fields parameter, which is supplied to an eval function call within the generic function in include/class/tz_env.class. NOTE: some of these details are obtained from third party information.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2009-02-10  
Modified Date
2009-02-11  
Seq
2009-0517  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
239686 47849 CVE-2009-0517 7948  View
239687 47849 CVE-2009-0517 20090201 phpslash <= 0.8.1.1 Remote Code Execution Exploit  View
239688 47849 CVE-2009-0517 33572  View
239689 47849 CVE-2009-0517 phpslash-generic-code-execution(48441)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
44801 JVNDB-2009-005808 phpSlash の index.php における任意の PHP コードを実行される脆弱性 phpSlash の index.php は、Eval インジェクション、および include/class/tz_env.class のジェネリック関数内で eval 関数呼び出しへ渡されるため、任意の PHP コードを実行される脆弱性が存在します。 CVE-2009-0517 37948 CVE-2009-0517 47849 10 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-005808.html 2009-02-10 2012-12-20 View