Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
veracodeVeracode Vulnerability DatabaseVERACODE:4804
HistoryJul 30, 2017 - 7:52 a.m.

Remote Code Execution (RCE)

2017-07-3007:52:29
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7

0.006 Low

EPSS

Percentile

77.7%

JSON

Yii PHP Framework is vulnerable to remote code execution (RCE). A malicious user can inject and execute arbitrary PHP code through the value parameter in framework/zii/widgets/CDetailView.php.

CPENameOperatorVersion
yiisoft/yiile1.1.14

Related

nvd 1
cve 1
freebsd 1
prion 1
osv 1
friendsofphp 1
github 1
nessus 1
cvelist 1
nvd
nvd
CVE-2014-4672
2014-07-03 17:55:06
cve
cve
CVE-2014-4672
2014-07-03 17:55:06
freebsd
freebsd
yii -- Remote arbitrary PHP code execution
2014-07-03 00:00:00
prion
prion
Code injection
2014-07-03 17:55:00
osv
osv
Yii PHP Framework arbitrary PHP scripts execution
2022-05-17 04:38:57
friendsofphp
friendsofphp
The CDetailView widget allows remote attackers to execute arbitrary PHP scripts via vectors related to the value property
2014-06-30 07:15:00
github
github
Yii PHP Framework arbitrary PHP scripts execution
2022-05-17 04:38:57
nessus
nessus
FreeBSD : yii -- Remote arbitrary PHP code execution (5a35bc56-7027-11e4-a4a3-001999f8d30b)
2014-11-21 00:00:00
cvelist
cvelist
CVE-2014-4672
2014-07-03 17:00:00

0.006 Low

EPSS

Percentile

77.7%

JSON
Related for VERACODE:4804
nvd1cve1freebsd1prion1osv1friendsofphp1github1nessus1cvelist1