CVE-2008-3764

Eval injection vulnerability in globalsoff.php in Turnkey PHP Live Helper 2.0.1 and earlier allows remote attackers to execute arbitrary PHP code via the test parameter, and probably arbitrary parameters, to chat.php.

Link	Resource
http://demos.turnkeywebtools.com/phplivehelper/docs/change_log.txt
http://www.gulftech.org/?node=research&article_id=00124-08162008
http://www.securityfocus.com/bid/30729
http://secunia.com/advisories/31521	Vendor Advisory
http://securityreason.com/securityalert/4178
https://exchange.xforce.ibmcloud.com/vulnerabilities/44571
https://www.exploit-db.com/exploits/6261
http://www.securityfocus.com/archive/1/495542/100/0/threaded

Configuration 1

cpe:2.3:a:turnkeywebtools:php_live_helper:2.0:beta_4:*:*:*:*:*:* cpe:2.3:a:turnkeywebtools:php_live_helper:2.0:beta_5:*:*:*:*:*:* cpe:2.3:a:turnkeywebtools:php_live_helper:2.0:beta_2:*:*:*:*:*:* cpe:2.3:a:turnkeywebtools:php_live_helper:2.0:beta_1:*:*:*:*:*:* cpe:2.3:a:turnkeywebtools:php_live_helper:*:*:*:*:*:*:*:* cpe:2.3:a:turnkeywebtools:php_live_helper:2.0:beta_3:*:*:*:*:*:* cpe:2.3:a:turnkeywebtools:php_live_helper:2.0:beta_6:*:*:*:*:*:* cpe:2.3:a:turnkeywebtools:php_live_helper:2.0:*:*:*:*:*:*:*

---

Published : 2008-08-21 05:41

Updated : 2018-10-11 08:49

---

NVD link : CVE-2008-3764

Mitre link : CVE-2008-3764

No products.

CWE-94