RCE in Yoxel

CVE-2008-5071

Multiple eval injection vulnerabilities in itpm_estimate.php in Yoxel 1.23beta and earlier allow remote authenticated users to execute arbitrary PHP code via the proj_id parameter.

Vulnerability class: RCE (Remote Code Execution)

EPSS: 0.063 (92.9th percentile) — read the EPSS interpretation.

Affected products

  • Yoxel — versions 1.06beta, 1.07beta, 1.08beta
  • N/a — versions n/a

Weakness classification (CWE)

References