CVE-2008-5071
14.11.2008, 18:07
Multiple eval injection vulnerabilities in itpm_estimate.php in Yoxel 1.23beta and earlier allow remote authenticated users to execute arbitrary PHP code via the proj_id parameter.
| Vendor | Product | Version |
|---|---|---|
| yoxel | yoxel | 𝑥 ≤ 1.23beta |
| yoxel | yoxel | 1.06beta:beta |
| yoxel | yoxel | 1.07beta:beta |
| yoxel | yoxel | 1.08beta:beta |
| yoxel | yoxel | 1.09beta:beta |
| yoxel | yoxel | 1.10beta:beta |
| yoxel | yoxel | 1.11beta:beta |
| yoxel | yoxel | 1.12beta:beta |
| yoxel | yoxel | 1.13beta:beta |
| yoxel | yoxel | 1.14beta:beta |
| yoxel | yoxel | 1.15beta:beta |
| yoxel | yoxel | 1.16beta:beta |
| yoxel | yoxel | 1.17beta:beta |
| yoxel | yoxel | 1.18beta:beta |
| yoxel | yoxel | 1.19beta:beta |
| yoxel | yoxel | 1.20 |
| yoxel | yoxel | 1.20beta:beta |
| yoxel | yoxel | 1.21 |
| yoxel | yoxel | 1.21beta:beta |
| yoxel | yoxel | 1.22 |
| yoxel | yoxel | 1.22beta:beta |
𝑥
= Vulnerable software versions
References