8.4 High
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
68.3%
outdoorbits little-backup-box (aka Little Backup Box) before f39f91c allows remote attackers to execute arbitrary code because the PHP extract function is used for untrusted input.
github.com/outdoorbits/little-backup-box/commit/f39f91cd05544b3eb18b59897c765d6ba9313faa
www.php.net/manual/en/function.extract