b2evolution version 6.6.0 - 6.8.10 is vulnerable to input validation (backslash and single quote escape) in basic install functionality resulting in unauthenticated attacker gaining PHP code execution on the victim's setup.
Published at: January 02, 2018 at 08:29PM
View on website
New vulnerability on the NVD: CVE-2017-1000423
Tag: government hack NVD security
No comments: