{"id":"CVE-2008-3764","aliases":["EUVD-2008-3750","GHSA-xc3j-p373-xcmj"],"status":"published","title":"Eval injection vulnerability in globalsoff.php in Turnkey PHP Live Helper 2.0.1 and earlier...","description":"Eval injection vulnerability in globalsoff.php in Turnkey PHP Live Helper 2.0.1 and earlier allows remote attackers to execute arbitrary PHP code via the test parameter, and probably arbitrary parameters, to chat.php.","severity":{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.03326,"percentile":0.88689,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-94"],"published":"2008-08-21T17:00:00Z","modified":"2026-06-16T22:56:29Z","exploits":[{"source":"exploitdb","id":"EDB-6261","title":"PHP Live Helper 2.0.1 - Multiple Vulnerabilities","type":"webapps","platform":"php","date":"2008-08-18","verified":true,"url":"https://www.exploit-db.com/exploits/6261"}],"products":[{"vendor":"turnkeywebtools","product":"php_live_helper"}],"references":[{"url":"https://www.exploit-db.com/exploits/6261","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred"]},{"url":"http://securityreason.com/securityalert/4178","tags":["third-party-advisory","x_refsource_SREASON","x_transferred"]},{"url":"http://www.securityfocus.com/archive/1/495542/100/0/threaded","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"]},{"url":"http://www.securityfocus.com/bid/30729","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"http://demos.turnkeywebtools.com/phplivehelper/docs/change_log.txt","tags":["x_refsource_MISC","x_transferred"]},{"url":"http://secunia.com/advisories/31521","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44571","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://www.gulftech.org/?node=research\u0026article_id=00124-08162008","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2008-3764"},{"url":"https://github.com/advisories/GHSA-xc3j-p373-xcmj"}],"sources":{"cve":[{"id":"CVE-2008-3764","description":"Eval injection vulnerability in globalsoff.php in Turnkey PHP Live Helper 2.0.1 and earlier allows remote attackers to execute arbitrary PHP code via the test parameter, and probably arbitrary parameters, to chat.php.","status":"published","published":"2008-08-21T17:00:00Z","modified":"2024-08-07T09:52:59.926Z","updated_at":"2026-11-02T14:34:45.504702Z"}],"euvd":[{"id":"EUVD-2008-3750","description":"Eval injection vulnerability in globalsoff.php in Turnkey PHP Live Helper 2.0.1 and earlier allows remote attackers to execute arbitrary PHP code via the test parameter, and probably arbitrary parameters, to chat.php.","status":"published","published":"2008-08-21T17:00:00Z","modified":"2024-08-07T09:52:59Z","updated_at":"2026-11-03T01:38:50.792737Z"}],"ghsa":[{"id":"GHSA-xc3j-p373-xcmj","title":"Eval injection vulnerability in globalsoff.php in Turnkey PHP Live Helper 2.0.1 and earlier...","description":"Eval injection vulnerability in globalsoff.php in Turnkey PHP Live Helper 2.0.1 and earlier allows remote attackers to execute arbitrary PHP code via the test parameter, and probably arbitrary parameters, to chat.php.","status":"published","published":"2022-05-02T00:03:22Z","modified":"2023-01-31T05:07:08Z","cwes":["CWE-94"],"updated_at":"2026-11-02T14:49:09.290063Z"}],"nvd":[{"id":"CVE-2008-3764","description":"Eval injection vulnerability in globalsoff.php in Turnkey PHP Live Helper 2.0.1 and earlier allows remote attackers to execute arbitrary PHP code via the test parameter, and probably arbitrary parameters, to chat.php.","status":"published","published":"2008-08-21T17:41:00Z","modified":"2026-06-16T22:56:29.83Z","cvss":[{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"cwes":["CWE-94"],"updated_at":"2026-11-02T14:01:27.800088Z"}]}}