3 matches found
CVE-2017-1000423
b2evolution version 6.6.0 - 6.8.10 is vulnerable to input validation backslash and single quote escape in basic install functionality resulting in unauthenticated attacker gaining PHP code execution on the victim's setup...
PT-2018-5198
Name of the Vulnerable Software and Affected Versions b2evolution versions 6.6.0 through 6.8.10 Description The issue concerns input validation in the basic install functionality of the software. Specifically, it involves the escape of backslash and single quote characters, which can be exploited...
CVE-2017-1000423: Improper Input Validation
b2evolution version 6.6.0 - 6.8.10 is vulnerable to input validation backslash and single quote escape in basic install functionality resulting in unauthenticated attacker gaining PHP code execution on the victim's setup...