Skip to content
OpenAdvisories
Unscored CVE-2018-1000059 EUVD-2018-1815GHSA-p9vx-hjr4-hvx2

ValidFormBuilder version 4.5.4 contains a PHP Object Injection vulnerability in Valid Form unserialize method that can result in Possible t…

Published Feb 9, 2018 · Updated Sep 17, 2024 · Assigned by mitre

Description

ValidFormBuilder version 4.5.4 contains a PHP Object Injection vulnerability in Valid Form unserialize method that can result in Possible to execute unauthorised system commands remotely and disclose file contents in file system.

References