Filtered by vendor Yiiframework Subscriptions
Total 21 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2023-26750 1 Yiiframework 1 Yii 2024-08-02 9.8 Critical
SQL injection vulnerability found in Yii Framework Yii 2 Framework before v.2.0.47 allows the a remote attacker to execute arbitrary code via the runAction function. NOTE: the software maintainer's position is that the vulnerability is in third-party code, not in the framework.