Description
b2evolution version 6.6.0 - 6.8.10 is vulnerable to input validation (backslash and single quote escape) in basic install functionality resulting in unauthenticated attacker gaining PHP code execution on the victim's setup.
Unscored
CVE-2017-1000423
EUVD-2017-1560GHSA-8vmv-gvr3-636v
b2evolution version 6.6.0 - 6.8.10 is vulnerable to input validation (backslash and single quote escape) in basic install functionality res…
Published Jan 2, 2018 · Updated Sep 17, 2024 · Assigned by mitre