443 matches found
CVE-2023-24114
typecho 1.1/17.10.30 was discovered to contain a remote code execution RCE vulnerability via install.php...
SUSE CVE-2008-0123
Cross-site scripting XSS vulnerability in install.php for Moodle 1.8.3, and possibly other versions before 1.8.4, allows remote attackers to inject arbitrary web script or HTML via the dbname parameter. NOTE: this issue only exists until the installation is complete...
U.S. Dept Of Defense: Install.php File Exposure on Drupal
The install.php file on Drupal 8 or higher was left accessible after installation, potentially allowing attackers to reinstall the website and cause data loss or other issues. Additionally, an error message displayed on the website could be used to escalate privilege and access sensitive...
LibreNMS Arbitrary File Read
The installation process in LibreNMS before 2017-08-18 allows remote attackers to read arbitrary files, related to html/install.php...
CVE-2021-43479
A Remote Code Execution RCE vulnerability exists in The-Secretary 2.5 via install.php...
Remote code execution
A Remote Code Execution RCE vulnerability exists in The-Secretary 2.5 via install.php...
CVE-2021-43479
A Remote Code Execution RCE vulnerability exists in The-Secretary 2.5 via install.php...
CVE-2021-43479
A Remote Code Execution RCE vulnerability exists in The-Secretary 2.5 via install.php...
CVE-2021-43479
CVE-2021-43479 affects The-Secretary 2.5 and is a Remote Code Execution (RCE) via install.php. The vulnerability is documented with high/severe CVSS metrics (CVSSv3.1: 9.8, NETWORK, LOW attack complexity, NONE privileges required, NONE user interaction, high impact on confidentiality, integrity a...
The-Secretary security vulnerabilities
The-Secretary is a simple content management system by the Canadian mikaelstaer individual developer. The-Secretary 2.5 suffers from a security vulnerability that could lead to an RCE via install.php...
PT-2022-11854
Name of the Vulnerable Software and Affected Versions The-Secretary version 2.5 Description A Remote Code Execution RCE issue exists via the install.php file. Recommendations For The-Secretary version 2.5, consider removing or restricting access to the install.php file as a temporary workaround...
CVE-2021-43479: Undefined Security Weakness
A Remote Code Execution RCE vulnerability exists in The-Secretary 2.5 via install.php...
CVE-2022-25101
A vulnerability in the component /templates/install.php of WBCE CMS v1.5.2 allows attackers to execute arbitrary code via a crafted PHP file...
CVE-2022-25101
A vulnerability in the component /templates/install.php of WBCE CMS v1.5.2 allows attackers to execute arbitrary code via a crafted PHP file...
CVE-2022-25101: Undefined Security Weakness
A vulnerability in the component /templates/install.php of WBCE CMS v1.5.2 allows attackers to execute arbitrary code via a crafted PHP file...
PT-2022-17078
Name of the Vulnerable Software and Affected Versions WBCE CMS version 1.5.2 Description A vulnerability in the component /templates/install.php of WBCE CMS allows attackers to execute arbitrary code via a crafted PHP file. Recommendations For WBCE CMS version 1.5.2, consider removing or...
CVE-2020-19527
iCMS 7.0.14 attackers to execute arbitrary OS commands via shell metacharacters in the DBNAME parameter to install/install.php...
Design/Logic Flaw
iCMS 7.0.14 attackers to execute arbitrary OS commands via shell metacharacters in the DBNAME parameter to install/install.php...