CVE-2019-7719

Published February 11th, 2019

View on NVD ↗

CVSS v3

N/A

CVSS v2

7.5

HIGH

Affected

PROJECT

Description

Nibbleblog 4.0.5 allows eval injection by placing PHP code in the install.php username parameter and then making a content/private/shadow.php request.

dignajar/nibbleblog

Easy, fast and free CMS Blog. All you need is PHP to work.

GitHub

230