Yii Framework Code Injection

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2018-8074 · ADVISORY
• FriendsOfPHP/security-advisories · WEB
• yiisoft/yii2 · PACKAGE
• yiiframework.com/news/168/releasing-yii-2-0-15-and-database-extensions-with-security-fixes · WEB
• yiiframework.com/news/168/releasing-yii-2-0-15-and-database-extensions-with-security-fixes · WEB
• yiiframework.com/news/168/releasing-yii-2-0-15-and-database-extensions-with-security-fixes · Vendor Advisory

Lỗ hổng khác của yiisoft/yii2-dev

• CVE-2025-2689NGHIÊM TRỌNG 9.8A vulnerability, which was classified as critical, has been found in yiisoft Yii2 up to 2.0.45. Affected by this issue is the function getIt…
• CVE-2021-3692TRUNG BÌNH 5.3yii2 is vulnerable to Use of Predictable Algorithm in Random Number Generator
• CVE-2021-3689CAO 7.5yii2 is vulnerable to Use of Predictable Algorithm in Random Number Generator
• CVE-2018-7269NGHIÊM TRỌNG 9.8The findByCondition function in framework/db/ActiveRecord.php in Yii 2.x before 2.0.15 allows remote attackers to conduct SQL injection atta…
• CVE-2018-6009CAO 8.8In Yii Framework 2.x before 2.0.14, the switchIdentity function in web/User.php did not regenerate the CSRF token upon a change of identity.