CVE-2008-5619
Published Dec 17, 2008
Last updated 6 years ago
Overview
- Description
- html2text.php in Chuggnutt HTML to Text Converter, as used in PHPMailer before 5.2.10, RoundCube Webmail (roundcubemail) 0.2-1.alpha and 0.2-3.beta, Mahara, and AtMail Open 1.03, allows remote attackers to execute arbitrary code via crafted input that is processed by the preg_replace function with the eval switch.
- Source
- cve@mitre.org
- NVD status
- Modified
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 10
- Impact score
- 10
- Exploitability score
- 10
- Vector string
- AV:N/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
- nvd@nist.gov
- CWE-94
Social media
- Hype score
- Not currently trending
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:roundcube:webmail:0.2.1:alpha:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F467A8BF-1792-47E1-9C3D-4A4AB0DD17AA"
},
{
"criteria": "cpe:2.3:a:roundcube:webmail:0.2.3:beta:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E083F7E9-44BE-4247-B93B-20E326D7FBF0"
}
],
"operator": "OR"
}
]
}
]