⚡ Kritieke cyberalerts voor jouw sector & systemen — direct in je inbox. Aanmelden →

CVE-2014-9185

MEDIUM · 6.5 CVSS Gepubliceerd: 19-12-2014 CWE-94

Beschrijving

Static code injection vulnerability in install.php in Morfy CMS 1.05 allows remote authenticated users to inject arbitrary PHP code into config.php via the site_url parameter.

Vendors

Morfy Cms Project

Affected products

Morfy Cms

References

packetstormsecurity.com
seclists.org
www.securityfocus.com
www.vulnerability-lab.com
github.com