CVE-2026-116213 Webasyst Framework through 4.4.0 Arbitrary File Read via waArchiveTar Symlinks

Webasyst Framework through 4.4.0 contains an arbitrary file read vulnerability in waArchiveTar::writeItem that creates symlinks from theme archives without validating link targets. Authenticated users with theme management rights can upload themes containing symlinks to wa-config/db.php or...

CVE-2026-116213

The Webasyst Framework (through version 4.4.0 ) is vulnerable to an arbitrary file read vulnerability within the waArchiveTar::writeItem() function. The root cause is a failure to validate link targets when creating symlinks from theme archives. An authenticated user with theme management rights ...

PT-2018-11238

Name of the Vulnerable Software and Affected Versions MetInfo version 6.0.0 Description An issue was discovered that allows remote attackers to write arbitrary PHP code into config db.php. Recommendations For MetInfo version 6.0.0, update to a newer version that contains a fix for this issue, as...

PT-2018-17989

Name of the Vulnerable Software and Affected Versions MetInfo version 6.0.0 Description An issue was discovered in the installation process of MetInfo, where the filtering of the config/config db.php configuration file is not rigorous. This allows an attacker to insert malicious code during the...