Design/Logic Flaw

2018-08-2019:31:00

PRIOn knowledge base

www.prio-n.com

9.5 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

57.6%

JSON

YesWiki version <= cercopitheque beta 1 contains a PHP Object Injection vulnerability in Unserialising user entered parameter in i18n.inc.php that can result in execution of code, disclosure of information.

CPENameOperatorVersion
yeswikieq201210221.0.0
yeswikieq201310171.0.0
yeswikieq20163171.0.0

Name	Operator	Version
yeswiki	eq	201210221.0.0
yeswiki	eq	201310171.0.0
yeswiki	eq	20163171.0.0

References

0dd.zone/2018/08/05/YesWiki-Object-Injection/

github.com/YesWiki/yeswiki/issues/356