CVE-2008-6132

CVE-2008-6132 is an eval injection vulnerability affecting phpScheduleIt versions 1.2.10 and earlier, specifically in the reserve.php script. This flaw allows remote attackers to execute arbitrary PHP code by manipulating the start_date parameter, provided the magic_quotes_gpc setting is disabled. With a CVSS score of 6.8, it is considered a medium-severity vulnerability, indicating that an unauthenticated attacker can achieve partial confidentiality, integrity, and availability impacts with moderate attack complexity. While not on the CISA KEV list, exploit code is publicly available, including a Metasploit module and ExploitDB entries, suggesting a higher likelihood of exploitation despite a lack of widespread community discussion or media coverage.