PT-2017-19175

Name of the Vulnerable Software and Affected Versions WebsiteBaker version 2.10.0 Description The issue allows remote attackers to execute arbitrary PHP code. This can be achieved via the database username, database host, or database password parameter in the install/save.php file. Recommendation...

CVE-2017-9771: Improper Control of Generation of Code

install\save.php in WebsiteBaker v2.10.0 allows remote attackers to execute arbitrary PHP code via the databaseusername, databasehost, or databasepassword parameter...