57 matches found
EUVD-2026-61020
MyBB is free and open source forum software. From 1.8.13 until 1.8.40, the installer module does not properly escape user-supplied database configuration values written to the configuration file, resulting in PHP code injection and remote code execution when the installer is available...
The vulnerability of the _4_Setup() function in the install/index.php script of the DedeCMS content management system allows a hacker to execute arbitrary code.
The vulnerability of the 4Setup function in the DedeCMS content management system’s install/index.php script is related to improper external manipulation of file names or file paths. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
CVE-2026-19353
A vulnerability has been found in DedeCMS up to 5.7.118 UTF8SP2. The affected element is the function 4Setup of the file install/index.php of the component Installation Wizard. Such manipulation leads to file inclusion. The attack can be executed remotely. This attack is characterized by high...
PT-2026-69294
Name of the Vulnerable Software and Affected Versions DedeCMS versions prior to 5.7.119 UTF8SP2 Description A file inclusion issue exists within the Installation Wizard component. The flaw is located in the 4 Setup function of the install/index.php file. This allows a remote attacker to include...
EUVD-2019-7935
Malware in sbrugna...
EUVD-2019-7934
Malware in sbrugna...
EUVD-2019-7936
Malware in sbrugna...
EUVD-2018-20573
Malware in sbrugna...
CVE-2025-25991
A SQL Injection vulnerability exists in hooskcms v.1.7.1 , a lightweight content management system. The flaw originates from the improper neutralization of special elements used in an SQL command within the /install/index.php component. This allows a remote attacker to obtain sensitive informatio...
CVE-2023-44043
A reflected cross-site scripting XSS vulnerability in /install/index.php of Black Cat CMS 1.4.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Website title parameter...
CVE-2023-5221
ForU CMS contains a code injection vulnerability in /install/index.php via manipulation of the db_name argument. The issue allows remote code execution and has been publicly disclosed. Impact is tied to confidentiality, integrity, and availability at HIGH/CRITICAL levels per CVE-2023-5221, with m...
CVE-2023-1685
HadSky up to 7.11.8 contains a command injection vulnerability in the Installation Interface, specifically the /install/index.php file. The vulnerability allows remote exploitation and has been publicly disclosed. Affected software: HadSky versions up to 7.11.8. Root cause: unknown code in the In...
CVE-2021-40923
Cross-site scripting XSS vulnerability in install/index.php in bugs 1.8 and below version allows remote attackers to inject arbitrary web script or HTML via the email parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in install/index.php in bugs 1.8 and below version allows remote attackers to inject arbitrary web script or HTML via the email parameter...
CVE-2021-40924
Cross-site scripting XSS vulnerability in install/index.php in bugs 1.8 and below version allows remote attackers to inject arbitrary web script or HTML via the firstname parameter...
CVE-2021-40923
The CVE-2021-40923 entry describes a Cross-site Scripting (XSS) vulnerability in the Bugs open-source defect tracking system, specifically install/index.php for Bugs 1.8 and earlier. The issue arises from the email parameter, allowing remote attackers to inject arbitrary web script or HTML. Conne...
CVE-2021-40922
Cross-site scripting XSS vulnerability in install/index.php in bugs 1.8 and below version allows remote attackers to inject arbitrary web script or HTML via the lastname parameter...
CVE-2021-40922
CVE-2021-40922 is a cross-site scripting (XSS) vulnerability affecting the open source defect-tracking system Bugs/Tinyissue in versions 1.8 and earlier, exploitable via the last_name parameter in install/index.php . The root cause is improper input handling in that endpoint, enabling remote atta...
CVE-2021-37389
CVE-2021-37389 affects Chamilo 1.11.14. The vulnerability is a stored XSS in the installer paths main/install/index.php and main/install/ajax.php via the port parameter. The connected documents consistently describe this CVE as a stored XSS issue in Chamilo LMS and do not provide exploitation det...
