Html Quickform

1 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2018-1999022 CRITICAL Act Now

PEAR HTML_QuickForm version 3.2.14 contains an eval injection (CWE-95) vulnerability in HTML_QuickForm's getSubmitValue method, HTML_QuickForm's validate method, HTML_QuickForm_hierselect's. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Code Injection RCE Information Disclosure Html Quickform Civicrm

NVD

CVSS 3.0

9.8

EPSS

2.2%

CVE-2018-1999022

EPSS 2% CVSS 9.8

CRITICAL Act Now

PEAR HTML_QuickForm version 3.2.14 contains an eval injection (CWE-95) vulnerability in HTML_QuickForm's getSubmitValue method, HTML_QuickForm's validate method, HTML_QuickForm_hierselect's. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Code Injection RCE Information Disclosure +2

NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy