CVE-2008-5963

EUVD-2008-5933
Eval injection vulnerability in library/setup/rpc.php in Gravity Getting Things Done (GTD) 0.4.5 and earlier allows remote attackers to execute arbitrary PHP code via the objectname parameter.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
10 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:C/I:C/A:C
Base Score
CVSS 3.x
EPSS Score
Percentile: 90%
Affected Products (NVD)
VendorProductVersion
gravity-gtdgravity-gtd
𝑥
≤ 0.4.5
gravity-gtdgravity-gtd
0.2:beta
gravity-gtdgravity-gtd
0.3
gravity-gtdgravity-gtd
0.4
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://secunia.com/advisories/32982
http://www.securityfocus.com/bid/32646
https://exchange.xforce.ibmcloud.com/vulnerabilities/47091
https://www.exploit-db.com/exploits/7344
http://secunia.com/advisories/32982
http://www.securityfocus.com/bid/32646
https://exchange.xforce.ibmcloud.com/vulnerabilities/47091
https://www.exploit-db.com/exploits/7344