add CVE-2014-4672

minkbear · minkbear · commit 9ee6d65d3b67 · 2014-08-29T00:16:37.000+07:00
diff --git a/yiisoft/yii/CVE-2014-4672.yaml b/yiisoft/yii/CVE-2014-4672.yaml
@@ -0,0 +1,8 @@
+title:     The CDetailView widget allows remote attackers to execute arbitrary PHP scripts via vectors related to the value property
+link:      http://www.yiiframework.com/news/78/yii-1-1-15-is-released-security-fix/
+cve:       CVE-2014-4672
+branches:
+    1.1.x:
+        time:     2014-06-30 07:15:00
+        versions: [>=1.1.14,<1.1.15]
+reference: composer://yiisoft/yii
