CVE-2009-0673

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

2.65%

Published

Feb 22, 2009

Modified

Apr 22, 2026

Public PoC / Exploit (2)

All weaponized →

Exploit-DBravennuke 2.3.0 - Multiple Vulnerabilities TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Eval injection vulnerability in the Custom Fields feature in the Your Account module in Raven Web Services RavenNuke 2.30 allows remote authenticated administrators to execute arbitrary PHP code via the ID Field Name box in a yaCustomFields action to admin.php.

Weaknesses (CWE)

CWE-94

Affected Products (1)

ravenphpscripts · ravennukevulnerable

References (12)

http://ravenphpscripts.com/postt17156.html

http://www.securityfocus.com/archive/1/500988/100/0/threaded

http://www.securityfocus.com/bid/33787

http://www.waraxe.us/advisory-72.html

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/48790

https://www.exploit-db.com/exploits/8068

http://ravenphpscripts.com/postt17156.html

http://www.securityfocus.com/archive/1/500988/100/0/threaded

http://www.securityfocus.com/bid/33787

KEV Catalog EPSS Scores Vendors All CVEs