Skip to content
OpenAdvisories

Vendor

HybridAuth

1 known vulnerabilities.

Products

HybridAuth 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.3
    CVE-2014-125116 Public exploit

    HybridAuth 2.0.9 - 2.2.2 Unauthenticated RCE via install.php Configuration Injection

    A remote code execution vulnerability exists in HybridAuth versions 2.0.9 through 2.2.2 due to insecure use of the install.php installation script. The script remains accessible after deployment and fails to sanitize input before writing to the application’s …

    HybridAuth HybridAuth