critical9.8
CVE-2024-31022
An issue was discovered in CandyCMS version 1.0.0, allows remote attackers to execute arbitrary code via the install.php component.
Impact
An issue was discovered in CandyCMS version 1.0.0, allows remote attackers to execute arbitrary code via the install.php component.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Steve228uk | Candycms | Version 1.0.0 |