Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:cotonti:cotonti:1.0.0:*:*:*:*:*:*:*

1 brief RSS
critical advisory

Unauthenticated PHP Object Injection in Cotonti Comments Plugin

Cotonti 1.0.0 is vulnerable to unauthenticated remote code execution via a PHP object injection flaw in the Comments plugin's 'ci' GET parameter.

Comments plugin php-object-injection rce web-vulnerability
1r 1t 1c