CVE-2017-1000423

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2017-1000423

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-1000423.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2017-1000423

Published

2018-01-02T20:29:00.237Z

Modified

2026-07-08T12:53:43.189549Z

Severity

9.8 (Critical) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator

Summary

[none]

Details

b2evolution version 6.6.0 - 6.8.10 is vulnerable to input validation (backslash and single quote escape) in basic install functionality resulting in unauthenticated attacker gaining PHP code execution on the victim's setup.

References

Affected packages

Git / github.com/b2evolution/b2evolution

Affected ranges

Type

GIT

Repo

https://github.com/b2evolution/b2evolution

Events

Introduced

01beb737f86c06cb4b5f4fe3c3c71f9103077a08

Last affected

5e00bea0453ee3de69b59fb84ea9ffe79784c440

Fixed

0096a3ebc85f6aadbda2c4427cd092a538b161d2

Fixed

b899d654d931f3bf3cfbbdd71e0d1a0f3a16d04c

Database specific

{
    "source": [
        "CPE_RANGE",
        "REFERENCES"
    ],
    "cpe": "cpe:2.3:a:b2evolution:b2evolution:*:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "6.6.0"
        },
        {
            "last_affected": "6.8.10"
        }
    ]
}

Affected versions

6.*

6.6.0

6.6.1

6.6.4

6.6.5

6.6.6

6.6.7

6.6.8

6.7.0-alpha

6.7.5

6.7.6

6.7.7

6.8.0-beta

6.8.1

6.8.10

6.8.2

6.8.3

6.8.4

6.8.5

6.8.6

6.8.7

6.8.8

6.8.9

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-1000423.json"