Description
Nibbleblog 4.0.5 allows eval injection by placing PHP code in the install.php username parameter and then making a content/private/shadow.php request.
Unscored
CVE-2019-7719
EUVD-2019-17251GHSA-3p4p-6mrf-w5jm
Nibbleblog 4.0.5 allows eval injection by placing PHP code in the install.php username parameter and then making a content/private/shadow.p…
Published Feb 11, 2019 · Updated Sep 16, 2024 · Assigned by mitre