CVE-2008-6132: Brickhost Phpscheduleit

Medium severity, CVSS 6.8. EPSS: 26.1% chance of exploitation in the next 30 days.

Eval injection vulnerability in reserve.php in phpScheduleIt 1.2.10 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary PHP code via the start_date parameter.

Affected products

• Brickhost Phpscheduleit: up to and including 1.2.10; version 1.0 only; version 1.0.0rc1 only; version 1.0_rc1 only; version 1.2.0 only; version 1.2.1 only; …

Published 2009-02-13. Last modified 2026-06-16.