8 matches found
tinyissue and Pixeline Bugs Code Injection Vulnerabilities
tinyissue is a defect tracking system. pixeline Bugs is a branch of tinyissue. A code injection vulnerability exists in the install/config-setup.php file in tinyissue version 1.3.1 and pixeline Bugs version 1.3.2c and earlier, which can be exploited to execute arbitrary PHP code with the...
CVE-2019-9002
An issue was discovered in Tiny Issue 1.3.1 and pixeline Bugs through 1.3.2c. install/config-setup.php allows remote attackers to execute arbitrary PHP code via the databasehost parameter if the installer remains present in its original directory after installation is completed...
CVE-2019-9002
An issue was discovered in Tiny Issue 1.3.1 and pixeline Bugs through 1.3.2c. install/config-setup.php allows remote attackers to execute arbitrary PHP code via the databasehost parameter if the installer remains present in its original directory after installation is completed...
CVE-2019-9002
An issue was discovered in Tiny Issue 1.3.1 and pixeline Bugs through 1.3.2c. install/config-setup.php allows remote attackers to execute arbitrary PHP code via the databasehost parameter if the installer remains present in its original directory after installation is completed...
CVE-2019-9002
The CVE-2019-9002 entry describes a code execution vulnerability in Tiny Issue 1.3.1 and pixeline Bugs up to 1.3.2c. The install/config-setup.php file permits remote attackers to execute arbitrary PHP code via the database_host parameter if the installer remains in the original directory after in...
CVE-2019-9002
An issue was discovered in Tiny Issue 1.3.1 and pixeline Bugs through 1.3.2c. install/config-setup.php allows remote attackers to execute arbitrary PHP code via the databasehost parameter if the installer remains present in its original directory after installation is completed...
CVE-2019-9002: Missing Authorization
An issue was discovered in Tiny Issue 1.3.1 and pixeline Bugs through 1.3.2c. install/config-setup.php allows remote attackers to execute arbitrary PHP code via the databasehost parameter if the installer remains present in its original directory after installation is completed...
PT-2019-19303
Name of the Vulnerable Software and Affected Versions Tiny Issue versions 1.3.1 through 1.3.2c pixeline Bugs versions 1.3.1 through 1.3.2c Description An issue allows remote attackers to execute arbitrary PHP code via the database host parameter in the install/config-setup.php file if the install...