CoreCVE
Back

CRITICAL

b2evolution version 6.6.0 - 6.8.10 is vulnerable to input validation (backslash and single quote escape) in basic install functionality resulting in unauthenticated attacker gaining PHP code execution on the victim's setup

Published Jan 2, 2018

Description

b2evolution version 6.6.0 - 6.8.10 is vulnerable to input validation (backslash and single quote escape) in basic install functionality resulting in unauthenticated attacker gaining PHP code execution on the victim's setup.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-20

Improper Input Validation

References (3)

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED
Assigner mitre
Published Jan 2, 2018
Updated Sep 17, 2024
Reserved Jan 2, 2018
Link CVE-2017-1000423

CISA Vulnrichment

No data

NVD

Status Modified
Modified Jun 17, 2026
Link CVE-2017-1000423

Red Hat

No data

ENISA EUVD

Assigner mitre
Published Jan 2, 2018
Updated Sep 17, 2024
Link EUVD-2017-1560

GitHub

No data