VYPR
← All advisories
High severity8.8NVD Advisory· Published Sep 17, 2018· Updated Jun 17, 2026

CVE-2016-9045

CVE-2016-9045

Description

A code execution vulnerability exists in ProcessMaker Enterprise Core 3.0.1.7-community. A specially crafted web request can cause unsafe deserialization potentially resulting in PHP code being executed. An attacker can send a crafted web parameter to trigger this vulnerability.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • ProcessMaker/ProcessMaker Enterprisev5
    Range: ProcessMaker Enterprise Core 3.0.1.7-community
  • ProcessMaker/Processmakerllm-fuzzy2 versions
    = 3.0.1.7-community+ 1 more
    • (no CPE)range: = 3.0.1.7-community
    • cpe:2.3:a:processmaker:processmaker:3.0.1.7:*:*:*:enterprise:*:*:*

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.