CVE-2018-16604 | BDVDB-2026-106587 Detail

Description#

An issue was discovered in Nibbleblog v4.0.5. With an admin's username and password, an attacker can execute arbitrary PHP code by changing the username because the username is surrounded by double quotes (e.g., "${phpinfo()}").

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12018-09-06Record published in the CVE List.
2. Version 22024-09-16Most recent update recorded in the CVE List.