Security Advisory

CVE-2018-1000059

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2018-02-09 23:00:00
Last updated 2024-09-17 04:19:05
Assigner mitre
State PUBLISHED

Description

ValidFormBuilder version 4.5.4 contains a PHP Object Injection vulnerability in Valid Form unserialize method that can result in Possible to execute unauthorised system commands remotely and disclose file contents in file system.