Critical severity9.8NVD Advisory· Published Dec 30, 2023· Updated Jun 17, 2026

CVE-2023-52262

Description

outdoorbits little-backup-box (aka Little Backup Box) before f39f91c allows remote attackers to execute arbitrary code because the PHP extract function is used for untrusted input.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

outdoorbits/little-backup-boxdescription
Outdoorbits/little-backup-boxllm-create
Range: <f39f91c

Patches

Vulnerability mechanics

References

github.com/outdoorbits/little-backup-box/commit/f39f91cd05544b3eb18b59897c765d6ba9313faanvdPatch
www.php.net/manual/en/function.extractnvdProduct

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000