NVD

Id
48137  
Name
CVE-2009-0820  
Description
Multiple eval injection vulnerabilities in phpScheduleIt before 1.2.11 allow remote attackers to execute arbitrary code via (1) the end_date parameter to reserve.php and (2) the start_date and end_date parameters to check.php. NOTE: the start_date/reserve.php vector is already covered by CVE-2008-6132.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2009-03-04  
Modified Date
2009-03-05  
Seq
2009-0820  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
241765 48137 CVE-2009-0820 http://phpscheduleit.svn.sourceforge.net/viewvc/phpscheduleit/1.2.11/check.php?r1=318&r2=332  View
241766 48137 CVE-2009-0820 http://phpscheduleit.svn.sourceforge.net/viewvc/phpscheduleit/1.2.11/reserve.php?r1=318&r2=328  View
241767 48137 CVE-2009-0820 http://sourceforge.net/project/shownotes.php?release_id=662749  View
241768 48137 CVE-2009-0820 ADV-2009-0491  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
43500 JVNDB-2009-004507 phpScheduleIt における任意のコードを実行される脆弱性 phpScheduleIt は、Eval インジェクションにより、任意のコードを実行される脆弱性が存在します。 CVE-2009-0820 38251 CVE-2009-0820 48137 7.5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-004507.html 2009-03-04 2012-09-25 View