Security Advisory
CVE-2014-4672
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
The CDetailView widget in Yii PHP Framework 1.1.14 allows remote attackers to execute arbitrary PHP scripts via vectors related to the value property.