VWE-2024-0235-1 Printable Version

https://www.vaultwiki.org/pages/Book/Documentation/VWE-2024-0235-1
This page is a chapter in Info Known Vulnerabilities

This page has been seen 8,642 times.

- Created by
  pegasus
  on November 25, 2024

Common Name None
VWE-ID VWE-2024-0235-1
Related Report None
Severity Extreme
Exploit Difficulty EASY
Platform Affects all platforms supported by the vulnerable versions.
Description Arbitrary code execution. By entering a specially-crafted HTML BB-Code tag within wiki content, a malicious user can execute arbitrary PHP code on the server. Does not affect Lite versions.

Discovered November 25, 2024
Resolved NOT RESOLVED
Patches Available None
The versions listed below are known to be affected by this issue. If you are using one of those versions, you should update to a newer release that has no known vulnerabilities.

Common Name	None
VWE-ID	VWE-2024-0235-1
Related Report	None
Severity	Extreme
Exploit Difficulty	EASY
Platform	Affects all platforms supported by the vulnerable versions.
Description	Arbitrary code execution. By entering a specially-crafted HTML BB-Code tag within wiki content, a malicious user can execute arbitrary PHP code on the server. Does not affect Lite versions.
Discovered	November 25, 2024
Resolved	NOT RESOLVED
Patches Available	None