CVE-2008-5071 - CVE House
Back to Database
Status published Critical CVE-2008-5071

Multiple eval injection vulnerabilities in itpm_estimate.php in Yoxel 1.23beta and...

Vulnerability Description

Multiple eval injection vulnerabilities in itpm_estimate.php in Yoxel 1.23beta and earlier allow remote authenticated users to execute arbitrary PHP code via the proj_id parameter.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2008-5071

Credits & Attribution

No credits recorded in the NVD database.

References

Affected Vendor

Affected Software

yoxel
Vulnerable Versions:
0, 1.06beta, 1.07beta, 1.08beta, 1.09beta, 1.10beta, 1.11beta, 1.12beta, 1.13beta, 1.14beta, 1.15beta, 1.16beta, 1.17beta, 1.18beta, 1.19beta, 1.20, 1.20beta, 1.21, 1.21beta, 1.22, 1.22beta

Timeline

Official Publish: November 14th, 2008
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.