CVE-2008-5071: Multiple eval injection vulnerabilities in itpm_estimate.php in Yoxel 1.23beta and earlier allow remote aut...

Security readout for executives and security teams

This CVE affects old Yoxel installations. An authenticated remote user could make the application execute PHP code on the server. That can become full application compromise if the vulnerable component is exposed and attackers obtain or already have an account. Exposure is limited to organizations still running Yoxel 1.23beta or earlier, especially if the application is reachable from untrusted networks and user accounts are broadly available. Prioritize this if Yoxel is present. The business risk is server-side code execution in a legacy application, with public exploit information and no patch details in the provided sources. Mitigation focus: Inventory environments for Yoxel 1.23beta or earlier.; Check vendor or maintainer guidance for supported fixes.; Retire or replace unsupported Yoxel deployments where possible..

Prepared

Jun 28, 2026, 18:15 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.