← Back

CVE-2008-5173

nvd nist
Published: Nov 19, 2008Modified: Apr 23, 2026

JSON object

Loading...
9.0
Vector
AV:N/AC:L/Au:S/C:C/I:C/A:C
Exploitability: 8.0 / Impact: 10.0
Source: NVD

Description

Unspecified vulnerability in testMaker before 3.0p16 allows remote authenticated users to execute arbitrary PHP code via unspecified attack vectors.

Affected (13)

Products: Testmaker: Testmaker
Testmaker
1 product
Testmaker
Configuration A
13 vulnerable
Vulnerable SoftwareAffected Versions
Testmaker
Testmaker
version ≤ 3.0p15
Testmaker
Version 3.0p10
Testmaker
Version 3.0p11
Testmaker
Version 3.0p12
Testmaker
Version 3.0p13
Testmaker
Version 3.0p14
Testmaker
Version 3.0p3
Testmaker
Version 3.0p4
Testmaker
Version 3.0p5
Testmaker
Version 3.0p6
Testmaker
Version 3.0p7
Testmaker
Version 3.0p8
Testmaker
Version 3.0p9

Related CWEs

CWE-94
Improper Control of Generation of Code ('Code Injection')
The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

References (8)

Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
Patch
Source: cve@mitre.org
Source: cve@mitre.org
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Patch
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.