CVE-2014-9185 in Morfy CMS
Summary
Static code injection vulnerability in install.php in Morfy CMS 1.05 allows remote authenticated users to inject arbitrary PHP code into config.php via the site_url parameter.
Reservation
12/02/2014
Disclosure
12/19/2014
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 73314 | Morfy CMS install.php code injection | 94 | Not defined | Not defined | CVE-2014-9185 |