CVE-2008-3764 json
Eval injection vulnerability in globalsoff.php in Turnkey PHP Live Helper 2.0.1 and earlier allows remote attackers to execute arbitrary PH…
published 2008-08-21 18 y ago modified 2026-06-16 4 mo ago also EUVD-2008-3750
- cvss
- 7.5
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 3.3%
- EPSS 3.3% chance of exploitation in 30 days, percentile 88%
- public exploits
- 1
- Exploit-DB
Summary
Eval injection vulnerability in globalsoff.php in Turnkey PHP Live Helper 2.0.1 and earlier allows remote attackers to execute arbitrary PHP code via the test parameter, and probably arbitrary parameters, to chat.php.
Timeline
- First public exploit (EDB-6261)
- Published
Exploit prediction
3.33% chance of exploitation in the next 30 days, higher than 88% of all scored CVEs (FIRST EPSS, 2026-11-08).
Exploits and checks
- EDB-6261 PHP Live Helper 2.0.1 - Multiple Vulnerabilities webapps, 2008-08-18
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 7.5 | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Classification
- Weakness
-
- CWE-94 Improper Control of Generation of Code
References
-
exploit-db.com
/exploits/6261
exploit
-
secunia.com
/advisories/31521
third-party-advisory, vendor-advisory
-
securityreason.com
/securityalert/4178
third-party-advisory
-
securityfocus.com
/archive/1/495542/100/0/threaded
mailing-list
-
securityfocus.com
/bid/30729
vdb-entry
- demos.turnkeywebtools.com /phplivehelper/docs/change_log.txt
-
exchange.xforce.ibmcloud.com
/vulnerabilities/44571
vdb-entry
- gulftech.org /?node=research&article_id=00124-08162008
Sources
- CVE List CVE-2008-3764
- NVD CVE-2008-3764
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.