CVEvulnerability
CVE-2008-3764
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2008-08-21
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-94
Description
Eval injection vulnerability in globalsoff.php in Turnkey PHP Live Helper 2.0.1 and earlier allows remote attackers to execute arbitrary PHP code via the test parameter, and probably arbitrary parameters, to chat.php.
Affected configurations
• turnkeywebtools php live helper (<= 2.0.1)
• turnkeywebtools php live helper 2.0
Related
Weakness · CWE (1)
- CWE-94 Improper Control of Generation of Code weakness
References
- http://demos.turnkeywebtools.com/phplivehelper/docs/change_log.txt demos.turnkeywebtools.com
- http://secunia.com/advisories/31521 Vendor Advisory
- http://securityreason.com/securityalert/4178 securityreason.com
- http://www.gulftech.org/?node=research&article_id=00124-08162008 www.gulftech.org
- http://www.securityfocus.com/archive/1/495542/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/30729 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/44571 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/6261 www.exploit-db.com
- http://demos.turnkeywebtools.com/phplivehelper/docs/change_log.txt demos.turnkeywebtools.com
- http://secunia.com/advisories/31521 Vendor Advisory
- http://securityreason.com/securityalert/4178 securityreason.com
- http://www.gulftech.org/?node=research&article_id=00124-08162008 www.gulftech.org
- http://www.securityfocus.com/archive/1/495542/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/30729 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/44571 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/6261 www.exploit-db.com