-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI
PHPPHP| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| mos/cimage | composer | < 0.7.19 | 0.7.19 |
Miggo AIRoot Cause AnalysisThe vulnerability exists in the inline code of the file 'webroot/check_system.php', specifically in the line where the $_SERVER['SERVER_SOFTWARE'] variable is directly echoed without proper sanitization. The patch adds htmlentities() to neutralize the input. However, this vulnerability does not stem from a specific function but from the lack of output encoding in the script's inline code. Since no user-defined functions are involved in the vulnerable code path, no specific functions are identified as vulnerable with high confidence.
Ongoing coverage of React2Shell