Vulnerability in N/a
CVE-2009-0517
Eval injection vulnerability in index.php in phpSlash 0.8.1.1 and earlier allows remote attackers to execute arbitrary PHP code via the fields parameter, which is supplied to an eval function call within the generic function in include/cla…
EPSS: 0.692 (98.7th percentile) — read the EPSS interpretation.
Affected products
- N/a — versions n/a
Public proof-of-concept exploits
References
- 33717 (x_refsource_SECUNIA, third-party-advisory)
- 33572 (vdb-entry, x_refsource_BID)
- phpslash-generic-code-execution(48441) (vdb-entry, x_refsource_XF)
- 7948 (exploit, x_refsource_EXPLOIT-DB)
- 51727 (x_refsource_OSVDB, vdb-entry)
- 20090201 phpslash <= 0.8.1.1 Remote Code Execution Exploit (mailing-list, x_refsource_BUGTRAQ)
Frequently asked questions
- What is CVE-2009-0517?
- CVE-2009-0517 is a vulnerability in N/a. Published 2009-02-11.
- Is CVE-2009-0517 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.