b2evolution Improper Input Validation Vulnerability - CVE-2017-1000423 - Vulnerability Database

b2evolution Improper Input Validation Vulnerability - CVE-2017-1000423

Critical

Reference: CVE-2017-1000423

NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2017-1000423

Title: b2evolution Improper Input Validation Vulnerability

Overview:

b2evolution version 6.6.0 - 6.8.10 is vulnerable to input validation (backslash and single quote escape) in basic install functionality resulting in unauthenticated attacker gaining PHP code execution on the victim39s setup.