Minecraft Servers List Lite and Premium Minecraft Servers List Unauthenticated Upload Vulnerability

Minecraft Servers List Lite is a lite version of a set of scripts for displaying a list of Minecraft game servers.Premium Minecraft Servers List is its premium version. A security vulnerability in the install.php file in versions of Minecraft Servers List Lite prior to commit c1cd164 and Premium...

CVE-2018-5749

install.php in Minecraft Servers List Lite before commit c1cd164 and Premium Minecraft Servers List before 2.0.4 does not sanitize input before saving database connection information in connect.php, which might allow remote attackers to execute arbitrary PHP code via the 1 databaseserver, 2...

Code injection

install.php in Minecraft Servers List Lite before commit c1cd164 and Premium Minecraft Servers List before 2.0.4 does not sanitize input before saving database connection information in connect.php, which might allow remote attackers to execute arbitrary PHP code via the 1 databaseserver, 2...

CVE-2018-5749: Unrestricted Upload of File with Dangerous Type

install.php in Minecraft Servers List Lite before commit c1cd164 and Premium Minecraft Servers List before 2.0.4 does not sanitize input before saving database connection information in connect.php, which might allow remote attackers to execute arbitrary PHP code via the 1 databaseserver, 2...

PT-2018-17122

Name of the Vulnerable Software and Affected Versions: Minecraft Servers List Lite versions prior to commit c1cd164 Premium Minecraft Servers List versions prior to 2.0.4 Description: The issue is related to the install.php file, which does not properly sanitize input before saving database...