CVE-2009-0517: Phpslash

High severity, CVSS 10.0. EPSS: 48.9% chance of exploitation in the next 30 days.

Eval injection vulnerability in index.php in phpSlash 0.8.1.1 and earlier allows remote attackers to execute arbitrary PHP code via the fields parameter, which is supplied to an eval function call within the generic function in include/class/tz_env.class. NOTE: some of these details are obtained from third party information.

Affected products

• Phpslash Phpslash: any version; up to and including 0.8.1.1; version 0.5.3.2 only; version 0.6 only; version 0.6.1 only; version 0.6.2 only; …

Published 2009-02-11. Last modified 2026-06-16.