LibreNMS Arbitrary File Read

The installation process in LibreNMS before 2017-08-18 allows remote attackers to read arbitrary files, related to html/install.php...

CVE-2021-43479

A Remote Code Execution RCE vulnerability exists in The-Secretary 2.5 via install.php...

Remote code execution

A Remote Code Execution RCE vulnerability exists in The-Secretary 2.5 via install.php...

CVE-2021-43479

A Remote Code Execution RCE vulnerability exists in The-Secretary 2.5 via install.php...

CVE-2021-43479

CVE-2021-43479 affects The-Secretary 2.5 and is a Remote Code Execution (RCE) via install.php. The vulnerability is documented with high/severe CVSS metrics (CVSSv3.1: 9.8, NETWORK, LOW attack complexity, NONE privileges required, NONE user interaction, high impact on confidentiality, integrity a...

The-Secretary 安全漏洞

The-Secretary is a simple content management system by the Canadian mikaelstaer individual developer. The-Secretary 2.5 suffers from a security vulnerability that could lead to an RCE via install.php...

CVE-2021-43479: Undefined Security Weakness

A Remote Code Execution RCE vulnerability exists in The-Secretary 2.5 via install.php...

CVE-2022-25101

A vulnerability in the component /templates/install.php of WBCE CMS v1.5.2 allows attackers to execute arbitrary code via a crafted PHP file...

CVE-2022-25101: Undefined Security Weakness

A vulnerability in the component /templates/install.php of WBCE CMS v1.5.2 allows attackers to execute arbitrary code via a crafted PHP file...

CVE-2020-19527

iCMS 7.0.14 attackers to execute arbitrary OS commands via shell metacharacters in the DBNAME parameter to install/install.php...

Design/Logic Flaw

iCMS 7.0.14 attackers to execute arbitrary OS commands via shell metacharacters in the DBNAME parameter to install/install.php...

CVE-2020-19142

iCMS 7 attackers to execute arbitrary OS commands via shell metacharacters in the DBPREFIX parameter to install/install.php...

CVE-2020-19527

iCMS 7.0.14 attackers to execute arbitrary OS commands via shell metacharacters in the DBNAME parameter to install/install.php...

CVE-2020-19142: Improper Neutralization of Special Elements used in an OS Command

iCMS 7 attackers to execute arbitrary OS commands via shell metacharacters in the DBPREFIX parameter to install/install.php...

idreamsoft iCMS Operating System Command Injection Vulnerability

idreamsoft iCMS is an open source content management system CMS based on PHP and MySQL. A security vulnerability exists in iCMS 7.0.14, which can be exploited by an attacker to install.php by executing arbitrary OS commands via shell metacharacters in the DB NAME parameter...

CVE-2020-19527: Improper Neutralization of Special Elements used in an OS Command

iCMS 7.0.14 attackers to execute arbitrary OS commands via shell metacharacters in the DBNAME parameter to install/install.php...

CVE-2020-15177

GLPI prior to 9.5.2 is vulnerable due to install/install.php storing user input into url_base/url_base_api, enabling XSS and insecure redirection without authentication; patch to 9.5.2 or later.

CVE-2020-15177: Improper Neutralization of Input During Web Page Generation

In GLPI before version 9.5.2, the install/install.php endpoint insecurely stores user input into the database as urlbase and urlbaseapi. These settings are referenced throughout the application and allow for vulnerabilities like Cross-Site Scripting and Insecure Redirection Since authentication i...

glpi -- Unauthenticated Stored XSS

MITRE Corporation reports: In GLPI before version 9.5.2, the install/install.php endpoint insecurely stores user input into the database as urlbase and urlbaseapi. These settings are referenced throughout the application and allow for vulnerabilities like Cross-Site Scripting and Insecure...

Drupal 7.x < 7.69 Multiple Vulnerabilities

According to its self-reported version number, the detected Drupal application is affected by multiple vulnerabilities : - The Drupal project uses the third-party library ArchiveTar, which has released a security update that impacts some Drupal configurations. Multiple vulnerabilities are possibl...