CVE-2024-31022

A critical vulnerability exists in CandyCMS version 1.0.0 , where remote attackers can achieve arbitrary code execution via the install.php component. The root cause involves improper control of generation of code (CWE-94). The impact is severe, potentially allowing full system compromise. As a r...