critical9.8
CVE-2023-52262
outdoorbits little-backup-box (aka Little Backup Box) before f39f91c allows remote attackers to execute arbitrary code because the PHP extract function is used…
Impact
outdoorbits little-backup-box (aka Little Backup Box) before f39f91c allows remote attackers to execute arbitrary code because the PHP extract function is used for untrusted input.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Outdoorbits | Little Backup Box | before 2023-10-03 |
References
- NVD record
- CVE.org record
- https://github.com/outdoorbits/little-backup-box/commit/f39f91cd05544b3eb18b59897c765d6ba9313faa
- https://www.php.net/manual/en/function.extract
- https://github.com/outdoorbits/little-backup-box/commit/f39f91cd05544b3eb18b59897c765d6ba9313faa
- https://www.php.net/manual/en/function.extract