Yii Path Traversal Vulnerability

Yii is a component-based, high-performance PHP framework for developing large-scale web applications developed by the YII team. A security vulnerability exists in Yii before version 2.0.5, which can be exploited to execute any local .php file via webViewAction...

PT-2023-10318

Name of the Vulnerable Software and Affected Versions Yii aka Yii2 versions 2.0.0 through 2.0.4 Description The issue allows attackers to execute any local .php file via a relative path in the view parameter. This is related to the webViewAction in Yii. Recommendations For versions 2.0.0 through...