CVE-2017-9771

Critical

Published: 21/06/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

The install/save.php file in WebsiteBaker version 2.10.0 has a vulnerability that allows remote attackers to execute arbitrary PHP code via the database_username, database_host, or database_password parameters.

Risk Assessment

Attackers can exploit this vulnerability to gain control over the system, potentially leading to data loss or compromise of the entire application.

Recommendation

It is recommended to update to the latest version of WebsiteBaker and to verify and secure configuration parameters against unauthorized access.

Original NVD description (English source)

install\save.php in WebsiteBaker v2.10.0 allows remote attackers to execute arbitrary PHP code via the database_username, database_host, or database_password parameter.