NVD

Id
5362  
Name
CVE-2008-5619  
Description
html2text.php in Chuggnutt HTML to Text Converter, as used in PHPMailer before 5.2.10, RoundCube Webmail (roundcubemail) 0.2-1.alpha and 0.2-3.beta, Mahara, and AtMail Open 1.03, allows remote attackers to execute arbitrary code via crafted input that is processed by the preg_replace function with the eval switch.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-03  
Published
2008-12-16  
Modified Date
2016-09-22  
Seq
2008-5619  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
33669 5362 CVE-2008-5619 http://mahara.org/interaction/forum/topic.php?id=533  View
33670 5362 CVE-2008-5619 http://sourceforge.net/forum/forum.php?forum_id=898542  View
33671 5362 CVE-2008-5619 http://trac.roundcube.net/changeset/2148  View
33672 5362 CVE-2008-5619 http://trac.roundcube.net/ticket/1485618  View
33673 5362 CVE-2008-5619 7549  View
33674 5362 CVE-2008-5619 7553  View
33675 5362 CVE-2008-5619 [oss-security] 20081212 CVE Request - roundcubemail  View
33676 5362 CVE-2008-5619 20081222 POC for CVE-2008-5619 (roundcubemail PHP arbitrary code injection)  View
33677 5362 CVE-2008-5619 ADV-2008-3418  View
33678 5362 CVE-2008-5619 ADV-2008-3419  View
33679 5362 CVE-2008-5619 https://github.com/PHPMailer/PHPMailer/commit/8beacc646acb67c995aea10ac5585970efc7355a  View
33680 5362 CVE-2008-5619 FEDORA-2008-11220  View
33681 5362 CVE-2008-5619 FEDORA-2008-11234  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
51257 JVNDB-2008-006567 roundcubemail で使用されている Chuggnutt HTML to Text Converter における任意のコードを実行される脆弱性 RoundCube Webmail (roundcubemail) で使用されている Chuggnutt HTML to Text Converter の html2text.php には、任意のコードを実行される脆弱性が存在します。 CVE-2008-5619 35732 CVE-2008-5619 5362 10 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-006567.html 2008-12-08 2012-12-20 View