CVEvulnerability

CVE-2014-1999

7.5 HIGH Published 2014-07-20 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2014-07-20
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
CWE-94

Description

The auto-format feature in the Request_Curl class in FuelPHP 1.1 through 1.7.1 allows remote attackers to execute arbitrary code via a crafted response.

Affected configurations

• fuelphp fuelphp 1.1 • fuelphp fuelphp 1.2 • fuelphp fuelphp 1.2.1 • fuelphp fuelphp 1.3 • fuelphp fuelphp 1.4 • fuelphp fuelphp 1.5 • fuelphp fuelphp 1.5.1 • fuelphp fuelphp 1.5.2 • fuelphp fuelphp 1.5.3 • fuelphp fuelphp 1.6 • fuelphp fuelphp 1.6.1 • fuelphp fuelphp 1.7 • fuelphp fuelphp 1.7.1

Related

Weakness · CWE (1)

  • CWE-94 Improper Control of Generation of Code weakness

References