CVE-2009-0673 | BDVDB-2026-35109 Detail

Description#

Eval injection vulnerability in the Custom Fields feature in the Your Account module in Raven Web Services RavenNuke 2.30 allows remote authenticated administrators to execute arbitrary PHP code via the ID Field Name box in a yaCustomFields action to admin.php.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/bid/33787
http://ravenphpscripts.com/postt17156.html
https://exchange.xforce.ibmcloud.com/vulnerabilities/48790
http://www.securityfocus.com/archive/1/500988/100/0/threaded
https://www.exploit-db.com/exploits/8068
http://www.waraxe.us/advisory-72.html

Exploit#

https://www.exploit-db.com/exploits/8068

History#

Version 12009-02-22Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.