CVE-2019-11376

n/a / n/a PUBLISHED

Description (CNA)

SOY CMS v3.0.2 allows remote attackers to execute arbitrary PHP code via a <?php substring in the second text box. NOTE: the vendor indicates that there was an assumption that the content is "made editable on its own.

Affected (CNA)

Vendor / product	Versions
n/a / n/a	affected n/a

CWE

No CWE identifiers supplied.

References

http://www.iwantacve.cn/index.php/archives/212/
https://github.com/inunosinsi/soycms/issues/5

ADP enrichment

CVE

No English description supplied.

http://www.iwantacve.cn/index.php/archives/212/
https://github.com/inunosinsi/soycms/issues/5

CISA-ADP

No English description supplied.

No references supplied.