NetSight
IP …
high7.5Public exploit code

CVE-2009-0820

Multiple eval injection vulnerabilities in phpScheduleIt before 1.2.11 allow remote attackers to execute arbitrary code via (1) the end_date parameter to reser…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Multiple eval injection vulnerabilities in phpScheduleIt before 1.2.11 allow remote attackers to execute arbitrary code via (1) the end_date parameter to reserve.php and (2) the start_date and end_date parameters to check.php. NOTE: the start_date/reserve.php vector is already covered by CVE-2008-6132.

Affected products

VendorProductAffected versions
Php.BrickhostPhpscheduleit
through 1.2.10
Versions 1.0, 1.0.0rc1, 1.0_rc1, 1.2.0, 1.2.1

Weakness classification

CWE-94

References