Vulnerabilities > CVE-2018-1000059 - Deserialization of Untrusted Data vulnerability in Validformbuilder Validform Builder 4.5.4
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
PARTIAL Integrity impact
PARTIAL Availability impact
PARTIAL Summary
ValidFormBuilder version 4.5.4 contains a PHP Object Injection vulnerability in Valid Form unserialize method that can result in Possible to execute unauthorised system commands remotely and disclose file contents in file system.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |