2014-07-03 17:00:00
mitre
PUBLISHED
The CDetailView widget in Yii PHP Framework 1.1.14 allows remote attackers to execute arbitrary PHP scripts via vectors related to the value property.