Security Advisory

CVE-2008-5071

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2008-11-14 16:00:00
Last updated 2024-08-07 10:40:16
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

Multiple eval injection vulnerabilities in itpm_estimate.php in Yoxel 1.23beta and earlier allow remote authenticated users to execute arbitrary PHP code via the proj_id parameter.