CVE-2019-14746

2019-08-0715:04:04

mitre

www.cve.org

9.7 High

AI Score

Confidence

High

0.008 Low

EPSS

Percentile

81.3%

JSON

A issue was discovered in KuaiFanCMS 5.0. It allows eval injection by placing PHP code in the install.php db_name parameter and then making a config.php request.

References

github.com/poropro/kuaifan/issues/2