← Database

CVE-2008-5963

CRITICAL CVSS: 10.0 Published: 2009-01-23 Modified: 2026-06-16

Description

Eval injection vulnerability in library/setup/rpc.php in Gravity Getting Things Done (GTD) 0.4.5 and earlier allows remote attackers to execute arbitrary PHP code via the objectname parameter.

Affected Platforms

Gravity-Gtd Gravity-Gtd

Weakness Type

CWE-20

References