Unrated severityNVD Advisory· Published Jul 20, 2014· Updated May 6, 2026
CVE-2014-1999
CVE-2014-1999
Description
The auto-format feature in the Request_Curl class in FuelPHP 1.1 through 1.7.1 allows remote attackers to execute arbitrary code via a crafted response.
Affected products
14cpe:2.3:a:fuelphp:fuelphp:1.1:*:*:*:*:*:*:*+ 13 more
- cpe:2.3:a:fuelphp:fuelphp:1.1:*:*:*:*:*:*:*
- cpe:2.3:a:fuelphp:fuelphp:1.2:*:*:*:*:*:*:*
- cpe:2.3:a:fuelphp:fuelphp:1.2:rc1:*:*:*:*:*:*
- cpe:2.3:a:fuelphp:fuelphp:1.2.1:*:*:*:*:*:*:*
- cpe:2.3:a:fuelphp:fuelphp:1.3:*:*:*:*:*:*:*
- cpe:2.3:a:fuelphp:fuelphp:1.4:*:*:*:*:*:*:*
- cpe:2.3:a:fuelphp:fuelphp:1.5:*:*:*:*:*:*:*
- cpe:2.3:a:fuelphp:fuelphp:1.5.1:*:*:*:*:*:*:*
- cpe:2.3:a:fuelphp:fuelphp:1.5.2:*:*:*:*:*:*:*
- cpe:2.3:a:fuelphp:fuelphp:1.5.3:*:*:*:*:*:*:*
- cpe:2.3:a:fuelphp:fuelphp:1.6:*:*:*:*:*:*:*
- cpe:2.3:a:fuelphp:fuelphp:1.6.1:*:*:*:*:*:*:*
- cpe:2.3:a:fuelphp:fuelphp:1.7:*:*:*:*:*:*:*
- cpe:2.3:a:fuelphp:fuelphp:1.7.1:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
3- fuelphp.com/security-advisoriesnvdVendor Advisory
- jvn.jp/en/jp/JVN94791545/index.htmlnvdVendor Advisory
- jvndb.jvn.jp/jvndb/JVNDB-2014-000082nvdVendor Advisory
News mentions
0No linked articles in our index yet.