4 matches found
CVE-2018-18903
Vanilla 2.6.x before 2.6.4 allows remote code execution...
9.8CVSS9.8AI score0.05152EPSS
SaveExploits2References3
CVE-2018-18903
Vanilla 2.6.x before 2.6.4 allows remote code execution...
9.8CVSS7.8AI score
SaveExploits0References3
CVE-2018-18903
The CVE-2018-18903 issue affects Vanilla Forums (Vanilla) in the domGetImages function of the ImportController, where unserialize via a crafted phar archive enables remote code execution without authentication. This is tied to Vanilla Forums prior to 2.6.4. Affected product: Vanilla Forums; vulne...
9.8CVSS9.8AI score0.05152EPSS
SaveExploits2References3Affected Software1
20