Description
b2evolution version 6.6.0 - 6.8.10 is vulnerable to input validation (backslash and single quote escape) in basic install functionality resulting in unauthenticated attacker gaining PHP code execution on the victim's setup.
Remediation
References
Related Vulnerabilities
MediaWiki Improper Access Control Vulnerability (CVE-2015-8001)
WordPress Plugin WP-Members Membership Unspecified Vulnerability (3.1.9.2)
WordPress Plugin Catch Breadcrumb Security Bypass (1.6)
WebLogic Deserialization of Untrusted Data Vulnerability (CVE-2020-11620)
WordPress Plugin Duplicator-WordPress Migration Cross-Site Request Forgery (1.1.2)