← Database

CVE-2008-5071

CRITICAL CVSS: 9.0 Published: 2008-11-14 Modified: 2026-06-16

Description

Multiple eval injection vulnerabilities in itpm_estimate.php in Yoxel 1.23beta and earlier allow remote authenticated users to execute arbitrary PHP code via the proj_id parameter.

Affected Platforms

Yoxel Yoxel

Weakness Type

CWE-94

References