CVE-2009-0673

Eval injection vulnerability in the Custom Fields feature in the Your Account module in Raven Web Services RavenNuke 2.30 allows remote authenticated…

published February 22, 2009

CVSS
—
EPSS
3%
Percentile
85.5
In the wild
Unconfirmed
What it is

Eval injection vulnerability in the Custom Fields feature in the Your Account module in Raven Web Services RavenNuke 2.30 allows remote authenticated administrators to execute arbitrary PHP code via the ID Field Name box in a yaCustomFields action to admin.php.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02650 · 85.5th percentile
Published
2009-02-22T22:00Z
EPSS history
Timeline
  • 22 FEB 22:00Z
    Eval injection vulnerability in the Custom Fields feature in the Your Account module in Raven Web Services RavenNuke 2.30 allows remote authenticated…
    cvelistv5