Non évaluée
In OkayCMS through 2.3.4, an unauthenticated attacker can achieve remote code execution by injecting a malicious PHP object via a crafted cookie. This...
CVE-2019-16885
Première détection SecPulse
Description d'origine La description telle que publiée par la source (souvent en anglais).
In OkayCMS through 2.3.4, an unauthenticated attacker can achieve remote code execution by injecting a malicious PHP object via a crafted cookie. This could happen at two places: first in view/ProductsView.php using the cookie price_filter, and second in api/Comparison.php via the cookie comparison.
Références
- report packetstormsecurity.com
- report seclists.org
- report ait.ac.at