CVE-2014-1999

Name of the Vulnerable Software and Affected Versions FuelPHP versions 1.1 through 1.7.1

Description The issue concerns the auto-format feature in the Request Curl class, which allows remote attackers to execute arbitrary code via a crafted response.

Recommendations For FuelPHP versions 1.1 through 1.7.1, consider disabling the auto-format feature in the Request Curl class until a patch is available. Restrict access to the Request Curl class to minimize the risk of exploitation. Avoid using the auto-format feature in the Request Curl class until the issue is resolved.