high7.5
CVE-2014-1999
The auto-format feature in the Request_Curl class in FuelPHP 1.1 through 1.7.1 allows remote attackers to execute arbitrary code via a crafted response.
Impact
The auto-format feature in the Request_Curl class in FuelPHP 1.1 through 1.7.1 allows remote attackers to execute arbitrary code via a crafted response.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Fuelphp | Fuelphp | Versions 1.1, 1.2, 1.2.1, 1.3, 1.4, 1.5 |