CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2009-0820

Multiple eval injection vulnerabilities in phpScheduleIt before 1.2.11 allow remote attackers to execute arbitrary code via (1) the end_date parameter to reserve.php and (2) the start_date and end_date parameters to check.php. NOTE: the start_date/reserve.php vector is already covered by CVE-2008-6132.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.081

EPSS Ranking 91.8%

CVSS Severity

CVSS v2 Score 7.5

References

Products affected by CVE-2009-0820

Php.brickhost » Phpscheduleit » Version: Any

cpe:2.3:a:php.brickhost:phpscheduleit:*
Php.brickhost » Phpscheduleit » Version: 1.0

cpe:2.3:a:php.brickhost:phpscheduleit:1.0
Php.brickhost » Phpscheduleit » Version: 1.0.0rc1

cpe:2.3:a:php.brickhost:phpscheduleit:1.0.0rc1
Php.brickhost » Phpscheduleit » Version: 1.0_rc1

cpe:2.3:a:php.brickhost:phpscheduleit:1.0_rc1
Php.brickhost » Phpscheduleit » Version: 1.2.0

cpe:2.3:a:php.brickhost:phpscheduleit:1.2.0
Php.brickhost » Phpscheduleit » Version: 1.2.1

cpe:2.3:a:php.brickhost:phpscheduleit:1.2.1
Php.brickhost » Phpscheduleit » Version: 1.2.2

cpe:2.3:a:php.brickhost:phpscheduleit:1.2.2
Php.brickhost » Phpscheduleit » Version: 1.2.3

cpe:2.3:a:php.brickhost:phpscheduleit:1.2.3
Php.brickhost » Phpscheduleit » Version: 1.2.4

cpe:2.3:a:php.brickhost:phpscheduleit:1.2.4
Php.brickhost » Phpscheduleit » Version: 1.2.5

cpe:2.3:a:php.brickhost:phpscheduleit:1.2.5
Php.brickhost » Phpscheduleit » Version: 1.2.6

cpe:2.3:a:php.brickhost:phpscheduleit:1.2.6
Php.brickhost » Phpscheduleit » Version: 1.2.7

cpe:2.3:a:php.brickhost:phpscheduleit:1.2.7
Php.brickhost » Phpscheduleit » Version: 1.2.8

cpe:2.3:a:php.brickhost:phpscheduleit:1.2.8
Php.brickhost » Phpscheduleit » Version: 1.2.9

cpe:2.3:a:php.brickhost:phpscheduleit:1.2.9

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2009-0820

Products

Pricing

Contact Us