Skip to content

Known CVE

Yii 2 < 2.0.38 - Remote Code Execution

Yii 2 (yiisoft/yii2) before version 2.0.38 is vulnerable to remote code execution if the application calls `unserialize()` on arbitrary user input.

CVE-2020-15148

Critical2020CVSS 10CWE-502

cve2020 · rce · yii · yiiframework · vuln

Verified scans run this check after you prove you own the site.

All known CVEsView the checks catalogNational Vulnerability Database

Scan a website