AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2009-0820

HIGH · CVSS 7.5 EPSS 4.56%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2009-03-05 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE
CVE-2009-0820
Severity
HIGH
CVSS
7.5
EPSS
4.56%

Original NVD Description

Multiple eval injection vulnerabilities in phpScheduleIt before 1.2.11 allow remote attackers to execute arbitrary code via (1) the end_date parameter to reserve.php and (2) the start_date and end_date parameters to check.php. NOTE: the start_date/reserve.php vector is already covered by CVE-2008-6132.