critical9.8
CVE-2019-7720
taocms through 2014-05-24 allows eval injection by placing PHP code in the install.php db_name parameter and then making a config.php request.
Impact
taocms through 2014-05-24 allows eval injection by placing PHP code in the install.php db_name parameter and then making a config.php request.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Taogogo | Taocms | through 2014-05-24 |