Unscored CVE-2014-1999 EUVD-2014-2051GHSA-p6w4-r2qv-79v8

The auto-format feature in the Request_Curl class in FuelPHP 1.1 through 1.7.1 allows remote attackers to execute arbitrary code via a craf…

Published Jul 20, 2014 · Updated Aug 6, 2024 · Assigned by jpcert

Description

The auto-format feature in the Request_Curl class in FuelPHP 1.1 through 1.7.1 allows remote attackers to execute arbitrary code via a crafted response.

References

http://fuelphp.com/security-advisories
JVNDB-2014-000082 third-party-advisory
JVN#94791545 third-party-advisory