CVE-2008-5963

Eval injection vulnerability in library/setup/rpc.php in Gravity Getting Things Done (GTD) 0.4.5 and earlier allows remote attackers to execute arbitrary PHP code via the objectname parameter.

Link	Resource
http://secunia.com/advisories/32982	Vendor Advisory
http://www.securityfocus.com/bid/32646	Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/47091
https://www.exploit-db.com/exploits/7344

Configuration 1

cpe:2.3:a:gravity-gtd:gravity-gtd:0.2:beta:*:*:*:*:*:* cpe:2.3:a:gravity-gtd:gravity-gtd:0.3:*:*:*:*:*:*:* cpe:2.3:a:gravity-gtd:gravity-gtd:0.4:*:*:*:*:*:*:* cpe:2.3:a:gravity-gtd:gravity-gtd:*:*:*:*:*:*:*:*

---

Published : 2009-01-23 07:00

Updated : 2017-09-29 01:32

---

NVD link : CVE-2008-5963

Mitre link : CVE-2008-5963

No products.

CWE-20