2023-04-24 12:24:31 +02:00
{
"id" : "CVE-2009-0820" ,
"sourceIdentifier" : "cve@mitre.org" ,
"published" : "2009-03-05T02:30:00.687" ,
"lastModified" : "2009-03-05T05:00:00.000" ,
"vulnStatus" : "Analyzed" ,
2024-07-14 02:06:08 +00:00
"cveTags" : [ ] ,
2023-04-24 12:24:31 +02:00
"descriptions" : [
{
"lang" : "en" ,
"value" : "Multiple eval injection vulnerabilities in phpScheduleIt before 1.2.11 allow remote attackers to execute arbitrary code via (1) the end_date parameter to reserve.php and (2) the start_date and end_date parameters to check.php. NOTE: the start_date/reserve.php vector is already covered by CVE-2008-6132."
} ,
{
"lang" : "es" ,
"value" : "M\u00faltiples vulnerabilidades de inyecci\u00f3n en eval (evaluaci\u00f3n directa de c\u00f3digo din\u00e1mico) en phpScheduleIt anterior a v1.2.11; permiten a atacantes remotos ejecutar c\u00f3digo de su elecci\u00f3n a trav\u00e9s de (1) el par\u00e1metro end_date de reserve.php y (2) los par\u00e1metro start_date y end_date de check.php. NOTA: el vector start_date/reserve.php ya ha sido tratado en CVE-2008-6132."
}
] ,
"metrics" : {
"cvssMetricV2" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"cvssData" : {
"version" : "2.0" ,
"vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P" ,
"accessVector" : "NETWORK" ,
"accessComplexity" : "LOW" ,
"authentication" : "NONE" ,
"confidentialityImpact" : "PARTIAL" ,
"integrityImpact" : "PARTIAL" ,
"availabilityImpact" : "PARTIAL" ,
"baseScore" : 7.5
} ,
"baseSeverity" : "HIGH" ,
"exploitabilityScore" : 10.0 ,
"impactScore" : 6.4 ,
"acInsufInfo" : false ,
"obtainAllPrivilege" : false ,
"obtainUserPrivilege" : false ,
"obtainOtherPrivilege" : false ,
"userInteractionRequired" : false
}
]
} ,
"weaknesses" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"description" : [
{
"lang" : "en" ,
"value" : "CWE-94"
}
]
}
] ,
"configurations" : [
{
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:php.brickhost:phpscheduleit:*:*:*:*:*:*:*:*" ,
"versionEndIncluding" : "1.2.10" ,
"matchCriteriaId" : "E82FC990-E9AC-4B43-ABBF-5F40ABF1A80A"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:php.brickhost:phpscheduleit:1.0:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "7290BF1C-6FE1-41E4-BDA0-83DE37386E47"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:php.brickhost:phpscheduleit:1.0.0rc1:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "1D62D45B-DA45-433C-925A-1040E21FA522"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:php.brickhost:phpscheduleit:1.0_rc1:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "719A1C06-904B-4738-A91F-A10323FB9C05"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:php.brickhost:phpscheduleit:1.2.0:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "EB0C585D-37C7-4995-942E-93BA744B98E7"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:php.brickhost:phpscheduleit:1.2.0:beta:*:*:*:*:*:*" ,
"matchCriteriaId" : "FA558DC0-AA3C-4E60-8E83-FAFA700F6B63"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:php.brickhost:phpscheduleit:1.2.0:rc1:*:*:*:*:*:*" ,
"matchCriteriaId" : "8713ECF3-9DCD-4497-AFC9-46A5E2BC148F"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:php.brickhost:phpscheduleit:1.2.1:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "461FB24E-23B1-4007-BEC0-F1CB35FA4018"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:php.brickhost:phpscheduleit:1.2.2:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "D030A8C7-D749-4DC6-918C-A1D54CEA2BAD"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:php.brickhost:phpscheduleit:1.2.3:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "16EDE5F3-3418-42AD-A580-9FD0536A59EA"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:php.brickhost:phpscheduleit:1.2.4:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "29C6DA6B-0346-4FB1-A1A9-C54566D0119B"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:php.brickhost:phpscheduleit:1.2.5:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "E36FAD8A-FA46-43AB-8409-12D1531FEEB2"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:php.brickhost:phpscheduleit:1.2.6:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "1D32582C-79F6-4965-AD0C-E3303F3D473C"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:php.brickhost:phpscheduleit:1.2.7:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "3B7BC10E-49A1-4F6C-B06E-D51A172C94A9"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:php.brickhost:phpscheduleit:1.2.8:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "EDB0AC00-F7E5-4080-99EF-A70ABB67C661"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:php.brickhost:phpscheduleit:1.2.9:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "C6AE62D0-76B5-4E28-B243-DAD69EB0DA24"
}
]
}
]
}
] ,
"references" : [
{
"url" : "http://phpscheduleit.svn.sourceforge.net/viewvc/phpscheduleit/1.2.11/check.php?r1=318&r2=332" ,
"source" : "cve@mitre.org" ,
"tags" : [
"Patch" ,
"Vendor Advisory"
]
} ,
{
"url" : "http://phpscheduleit.svn.sourceforge.net/viewvc/phpscheduleit/1.2.11/reserve.php?r1=318&r2=328" ,
"source" : "cve@mitre.org" ,
"tags" : [
"Patch" ,
"Vendor Advisory"
]
} ,
2024-04-04 08:46:00 +00:00
{
"url" : "http://secunia.com/advisories/33991" ,
"source" : "cve@mitre.org" ,
"tags" : [
"Vendor Advisory"
]
} ,
2023-04-24 12:24:31 +02:00
{
"url" : "http://sourceforge.net/project/shownotes.php?release_id=662749" ,
"source" : "cve@mitre.org" ,
"tags" : [
"Patch"
]
} ,
{
"url" : "http://www.vupen.com/english/advisories/2009/0491" ,
"source" : "cve@mitre.org" ,
"tags" : [
"Patch" ,
"Vendor Advisory"
]
}
]
}
