Lucene search
MitreCVELIST:CVE-2020-36655HistoryJan 21, 2023 - 12:00 a.m.
CVE-2020-36655
2023-01-2100:00:00
mitre
www.cve.org
6
cve-2020-36655
yii2
gii
remote code execution
generator.php
messagecategory
php code
EPSS
0.009
Percentile
82.8%
Yii Yii2 Gii before 2.2.2 allows remote attackers to execute arbitrary code via the Generator.php messageCategory field. The attacker can embed arbitrary PHP code into the model file.
Related
osv
osv
CVE-2020-36655
2023-01-21 01:15:12
Command injection in yiisoft/yii2-gii
2023-01-21 03:30:28
nvd
nvd
CVE-2020-36655
2023-01-21 01:15:12
github
github
Command injection in yiisoft/yii2-gii
2023-01-21 03:30:28
prion
prion
Design/Logic Flaw
2023-01-21 01:15:00
cve
cve
CVE-2020-36655
2023-01-21 01:15:12