4 matches found
CVE-2005-4025
Help Desk Reloaded Free Help Desk does not remove or protect install.php once installation is complete, which allows remote attackers to gain privileges via a direct request to install.php, then navigating to accountsetup.php and creating a new user...
GLPI Cross-Site Scripting Vulnerability (CNVD-2020-67240)
GLPI is an open source IT and asset management software for individual developers. The software provides a full-featured IT resource management interface that you can use to build databases to fully manage IT computers, monitors, servers, printers, network devices, phones, and even toner cartridg...
CVE-2018-20602
Lei Feng TV CMS aka LFCMS 3.8.6 allows full path disclosure via the /install.php?s=/1 URI...
Web Reference Database PHP Remote File Inclusion Vulnerability
Web Reference Database aka refbase is a web-based multi-user interface product developed by the refbase community to provide search tools and automatic indexing for scientific literature management. A PHP remote file inclusion vulnerability exists in the install.php script in Web Reference Databa...