CVE-2008-5963

Eval injection vulnerability in library/setup/rpc.php in Gravity Getting Things Done (GTD) 0.4.5 and earlier allows remote attackers to execute arbitrary PHP code via the objectname parameter.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
10 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:C/I:C/A:C
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 85%
VendorProductVersion
gravity-gtdgravity-gtd
𝑥
≤ 0.4.5
gravity-gtdgravity-gtd
0.2:beta
gravity-gtdgravity-gtd
0.3
gravity-gtdgravity-gtd
0.4
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://secunia.com/advisories/32982
http://www.securityfocus.com/bid/32646
https://exchange.xforce.ibmcloud.com/vulnerabilities/47091
https://www.exploit-db.com/exploits/7344
http://secunia.com/advisories/32982
http://www.securityfocus.com/bid/32646
https://exchange.xforce.ibmcloud.com/vulnerabilities/47091
https://www.exploit-db.com/exploits/7344