CVE-2008-3764 EXPLOIT
7.5
HIGH · CVSS 2.0 · EPSS 3.3% (pctl 88)
Patch early
A public exploit exists.
Description
Eval injection vulnerability in globalsoff.php in Turnkey PHP Live Helper 2.0.1 and earlier allows remote attackers to execute arbitrary PHP code via the test parameter, and probably arbitrary parameters, to chat.php.
Scoring
| CVSS | 7.5 (HIGH, v2.0) |
|---|---|
| Vector | AV:N/AC:L/Au:N/C:P/I:P/A:P |
| EPSS | 3.33% — more likely to be exploited than 88% of all CVEs |
| Weakness | CWE-94 |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2008-08-21 |
| Last modified | 2026-06-16 |
Affected (1)
| Vendor | Product |
|---|---|
| turnkeywebtools | php live helper |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | PHP Live Helper 2.0.1 - Multiple Vulnerabilities | 2008-08-18 |
References
- http://demos.turnkeywebtools.com/phplivehelper/docs/change_log.txt
- http://secunia.com/advisories/31521
- http://securityreason.com/securityalert/4178
- http://www.gulftech.org/?node=research&article_id=00124-08162008
- http://www.securityfocus.com/archive/1/495542/100/0/threaded
- http://www.securityfocus.com/bid/30729
- https://exchange.xforce.ibmcloud.com/vulnerabilities/44571
- https://www.exploit-db.com/exploits/6261
- http://demos.turnkeywebtools.com/phplivehelper/docs/change_log.txt
- http://secunia.com/advisories/31521
- http://securityreason.com/securityalert/4178
- http://www.gulftech.org/?node=research&article_id=00124-08162008
- http://www.securityfocus.com/archive/1/495542/100/0/threaded
- http://www.securityfocus.com/bid/30729
- https://exchange.xforce.ibmcloud.com/vulnerabilities/44571
- https://www.exploit-db.com/exploits/6261
→ the Explorer · watch your stack · NVD