48 matches found
CVE-2005-4025
Help Desk Reloaded Free Help Desk does not remove or protect install.php once installation is complete, which allows remote attackers to gain privileges via a direct request to install.php, then navigating to accountsetup.php and creating a new user...
PT-2024-40446 · Packagist · Silverstripe/Framework
Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned Description: The issue allows extraction of pre-configured database or default admin account passwords by viewing the source of the page and inspecting the value property of the password fields when...
PT-2024-15763 · Unknown · Oliver Pos
Name of the Vulnerable Software and Affected Versions: The Oliver POS versions up to, and including, 2.4.1.8 Description: The issue is related to missing capability checks on several functions hooked via AJAX in the includes/class-pos-bridge-install.php file. This allows authenticated attackers...
The vulnerability of the InstalledVersions.php and install.php scripts of the PHP Composer dependency manager allows a hacker to execute arbitrary code and gain elevated privileges.
The vulnerability of the InstalledVersions.php and install.php scripts of the PHP Composer dependency manager is related to the inclusion of functions from an unverified controlled area. Exploiting this vulnerability could allow a attacker to execute arbitrary code and increase their privileges...
CVE-2024-0414
A vulnerability classified as problematic has been found in DeShang DSCMS up to 3.1.2/7.1. Affected is an unknown function of the file public/install.php. The manipulation leads to improper access controls. It is possible to launch the attack remotely. The exploit has been disclosed to the public...
PT-2024-15534 · Deshang · Deshang Dsmall
Name of the Vulnerable Software and Affected Versions: DeShang DSMall versions up to 6.1.0 Description: A vulnerability was found in DeShang DSMall, affecting an unknown part of the file public/install.php of the component HTTP GET Request Handler. The manipulation leads to improper access...
PT-2024-15536 · Deshang · Deshang Dscms
Name of the Vulnerable Software and Affected Versions: DeShang DSKMS versions up to 3.1.2 Description: A vulnerability was found in DeShang DSKMS, affecting some unknown processing of the file public/install.php. The manipulation leads to improper access controls. The attack may be initiated...
DeShang DSMall Access Control Error Vulnerability
DeShang DSMall is a multi-user mall system from DeShang, China. An Access Control Error vulnerability exists in DeShang DSMall prior to version 6.1.0, which stems from the file public/install.php of the component HTTP GET Request Handler that results in incorrect access control...
CVE-2024-0358
A vulnerability was found in DeShang DSO2O up to 4.1.0. It has been classified as critical. This affects an unknown part of the file /install/install.php. The manipulation leads to improper access controls. It is possible to initiate the attack remotely. The exploit has been disclosed to the publ...
Pluck CMS 跨站脚本漏洞
Pluck is a content management system CMS developed using the PHP language. A cross-site scripting vulnerability exists in Pluck CMS version 4.7.18, which stems from unknown code in install.php in the component Installation Handler, resulting in cross-site scripting. An attacker can exploit this...
CVE-2023-1682
A vulnerability has been found in Xunrui CMS 4.61 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /dayrui/My/Config/Install.txt. The manipulation leads to direct request. The attack can be launched remotely. The exploit has been disclosed to t...
SUSE CVE-2017-12775
qa-include/qa-install.php in Question2Answer before 1.7.5 allows remote attackers to create multiple user accounts...
CVE-2020-22937
A remote code execution RCE in e/install/index.php of EmpireCMS 7.5 allows attackers to execute arbitrary PHP code via writing malicious code to the install file...
CVE-2020-22937
A remote code execution RCE in e/install/index.php of EmpireCMS 7.5 allows attackers to execute arbitrary PHP code via writing malicious code to the install file...
Remote code execution
A remote code execution RCE in e/install/index.php of EmpireCMS 7.5 allows attackers to execute arbitrary PHP code via writing malicious code to the install file...
CVE-2020-22937
A remote code execution RCE in e/install/index.php of EmpireCMS 7.5 allows attackers to execute arbitrary PHP code via writing malicious code to the install file...
PT-2021-10810 · Empirecms · Empirecms
Name of the Vulnerable Software and Affected Versions: EmpireCMS version 7.5 Description: A remote code execution issue in the e/install/index.php file allows attackers to execute arbitrary PHP code by writing malicious code to the install file. This enables attackers to potentially gain control...
GLPI Cross-Site Scripting Vulnerability (CNVD-2020-67240)
GLPI is an open source IT and asset management software for individual developers. The software provides a full-featured IT resource management interface that you can use to build databases to fully manage IT computers, monitors, servers, printers, network devices, phones, and even toner cartridg...
Enhancesoft osTicket cross-site scripting vulnerability (CNVD-2020-16824)
Enhancesoft osTicket is a U.S. Enhancesoft's open source ticketing system. A cross-site scripting vulnerability exists in the setup/install.php file in Enhancesoft osTicket versions prior to 1.10.7 and 1.12.x versions prior to 1.12.1. The vulnerability stems from the lack of proper validation of...