Lucene search
JpcertCVE-2014-1999HistoryJul 20, 2014 - 11:12 a.m.
CVE-2014-1999
2014-07-2011:12:49
CWE-94
jpcert
web.nvd.nist.gov
32
security
fuelphp
request_curl
arbitrary code execution
cve-2014-1999
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
7.8
Confidence
Low
EPSS
0.031
Percentile
91.1%
The auto-format feature in the Request_Curl class in FuelPHP 1.1 through 1.7.1 allows remote attackers to execute arbitrary code via a crafted response.
Affected configurations
Node
fuelphpfuelphpMatch1.1
ORfuelphpfuelphpMatch1.2
ORfuelphpfuelphpMatch1.2rc1
ORfuelphpfuelphpMatch1.2.1
ORfuelphpfuelphpMatch1.3
ORfuelphpfuelphpMatch1.4
ORfuelphpfuelphpMatch1.5
ORfuelphpfuelphpMatch1.5.1
ORfuelphpfuelphpMatch1.5.2
ORfuelphpfuelphpMatch1.5.3
ORfuelphpfuelphpMatch1.6
ORfuelphpfuelphpMatch1.6.1
ORfuelphpfuelphpMatch1.7
ORfuelphpfuelphpMatch1.7.1
| Vendor | Product | Version | CPE |
|---|---|---|---|
| fuelphp | fuelphp | 1.1 | cpe:2.3:a:fuelphp:fuelphp:1.1:*:*:*:*:*:*:* |
| fuelphp | fuelphp | 1.2 | cpe:2.3:a:fuelphp:fuelphp:1.2:*:*:*:*:*:*:* |
| fuelphp | fuelphp | 1.2 | cpe:2.3:a:fuelphp:fuelphp:1.2:rc1:*:*:*:*:*:* |
| fuelphp | fuelphp | 1.2.1 | cpe:2.3:a:fuelphp:fuelphp:1.2.1:*:*:*:*:*:*:* |
| fuelphp | fuelphp | 1.3 | cpe:2.3:a:fuelphp:fuelphp:1.3:*:*:*:*:*:*:* |
| fuelphp | fuelphp | 1.4 | cpe:2.3:a:fuelphp:fuelphp:1.4:*:*:*:*:*:*:* |
| fuelphp | fuelphp | 1.5 | cpe:2.3:a:fuelphp:fuelphp:1.5:*:*:*:*:*:*:* |
| fuelphp | fuelphp | 1.5.1 | cpe:2.3:a:fuelphp:fuelphp:1.5.1:*:*:*:*:*:*:* |
| fuelphp | fuelphp | 1.5.2 | cpe:2.3:a:fuelphp:fuelphp:1.5.2:*:*:*:*:*:*:* |
| fuelphp | fuelphp | 1.5.3 | cpe:2.3:a:fuelphp:fuelphp:1.5.3:*:*:*:*:*:*:* |
Related
prion
prion
Format string
2014-07-20 11:12:00
cvelist
cvelist
CVE-2014-1999
2014-07-20 10:00:00
fuelphp
fuelphp
auto-format of Curl responses may lead to code execution
2014-01-05 00:00:00
jvn
jvn
JVN#94791545: FuelPHP vulnerable to remote code execution
2014-07-18 00:00:00
nvd
nvd
CVE-2014-1999
2014-07-20 11:12:49
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
7.8
Confidence
Low
EPSS
0.031
Percentile
91.1%
Related for CVE-2014-1999