Loading
Generated remediation guidance and an executive summary. No account required.
SQL injection vulnerability found in Yii Framework Yii 2 Framework before v.2.0.47 allows the a remote attacker to execute arbitrary code via the runAction function. NOTE: the software maintainer's position is that the vulnerability is in third-party code, not in the framework.
Use CWE-89, Yiiframework vendor hub and Yii product page to widen CVE-2023-26750 into its surrounding weakness, vendor, and product context.
Compare it with CVE-2024-58136, CVE-2015-5467 and CVE-2024-4990 for nearby disclosures in the same product family.