CVE-2008-3764 Eval injection vulnerability in globalsoff.php in Turnkey PHP Live Helper 2.0.1 and earlier allows remote attackers to execute arbitrary PHP code via the test parameter, and probably arbitrary paramet...
HighCVSS 7.5
EPSS 3.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Eval injection vulnerability in globalsoff.php in Turnkey PHP Live Helper 2.0.1 and earlier allows remote attackers to execute arbitrary PHP code via the test parameter, and probably arbitrary parameters, to chat.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| turnkeywebtools php live helper | <= 2.0.1 | No fix listed |
| turnkeywebtools php live helper | = 2.0 | No fix listed |
| turnkeywebtools php live helper | = 2.0-beta_1 | No fix listed |
| turnkeywebtools php live helper | = 2.0-beta_2 | No fix listed |
| turnkeywebtools php live helper | = 2.0-beta_3 | No fix listed |
| turnkeywebtools php live helper | = 2.0-beta_4 | No fix listed |
| turnkeywebtools php live helper | = 2.0-beta_5 | No fix listed |
| turnkeywebtools php live helper | = 2.0-beta_6 | No fix listed |
References
- demos.turnkeywebtools.com
- 31521 third-party-advisory vendor-advisory
- 4178 third-party-advisory
- www.gulftech.org
- 20080816 PHP Live Helper <= 2.0.1 Multiple Vulnerabilities mailing-list
- 30729 vdb-entry
- phplivehelper-chat-code-execution(44571) vdb-entry
- 6261 exploit