CVE-2015-5467

Published September 21st, 2023

View on NVD ↗

CVSS v3

9.8

CRITICAL

CVSS v2

N/A

Affected

1

PROJECT

Description

web\ViewAction in Yii (aka Yii2) 2.x before 2.0.5 allows attackers to execute any local .php file via a relative path in the view parameeter.

FriendsOfPHP/security-advisories

A database of PHP security advisories

GitHub

2.12K