CVE-2009-0673

Eval injection vulnerability in the Custom Fields feature in the Your Account module in Raven Web Services RavenNuke 2.30 allows remote authenticated administrators to execute arbitrary PHP code via the ID Field Name box in a yaCustomFields action to admin.php.

CVSS v2.0

6.5 MEDIUMAV:N/AC:L/Au:S/C:P/I:P/A:P

EPSS

2.65% chance of exploitation in the next 30 days, 85th percentile

Published

2009-02-22

Updated

2024-08-07

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/8068

References

• CVE Record
• NVD entry

Related

• CVE-2009-0672
• CVE-2009-0674
• CVE-2009-0659
• CVE-2009-0676
• CVE-2009-0658
• CVE-2009-0677