critical9.8
CVE-2019-16656
joyplus-cms 1.6.0 allows remote attackers to execute arbitrary PHP code via /install by placing the code in the name of an object in the database.
Impact
joyplus-cms 1.6.0 allows remote attackers to execute arbitrary PHP code via /install by placing the code in the name of an object in the database.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Joyplus Project | Joyplus | Version 1.6.0 |