CVEvulnerability
CVE-2008-5090
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2008-11-14
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-94
Description
Electron Inc. Advanced Electron Forum before 1.0.7 allows remote attackers to execute arbitrary PHP code via PHP code embedded in bbcode in the email parameter, which is processed by the preg_replace function with the eval switch.
Affected configurations
• anelectron advanced electron forum (<= 1.0.6)
• anelectron advanced electron forum 1.0.1
• anelectron advanced electron forum 1.0.2
• anelectron advanced electron forum 1.0.3
• anelectron advanced electron forum 1.0.4
• anelectron advanced electron forum 1.0.5
Related
Weakness · CWE (1)
- CWE-94 Improper Control of Generation of Code weakness
References
- http://secunia.com/advisories/31978 Vendor Advisory
- http://securityreason.com/securityalert/4598 securityreason.com
- http://www.anelectron.com/board/index.php?tid=3282 Vendor Advisory
- http://www.gulftech.org/?node=research&article_id=00131-09202008 www.gulftech.org
- http://www.securityfocus.com/archive/1/496552/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/31268 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45270 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/6499 www.exploit-db.com
- http://secunia.com/advisories/31978 Vendor Advisory
- http://securityreason.com/securityalert/4598 securityreason.com
- http://www.anelectron.com/board/index.php?tid=3282 Vendor Advisory
- http://www.gulftech.org/?node=research&article_id=00131-09202008 www.gulftech.org
- http://www.securityfocus.com/archive/1/496552/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/31268 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45270 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/6499 www.exploit-db.com