VYPR

Webtext

by Webtext

CVEs (1)

  • CVE-2006-6856Dec 31, 2006
    risk 0.04cvss epss 0.07

    Direct static code injection vulnerability in WebText CMS 0.4.5.2 and earlier allows remote attackers to inject arbitrary PHP code into a script in wt/users/ via the im parameter during a profile edit (edycja) operation, which is then executed via a direct request for this script.