CVE-2018-14579

GolemCMS (before 2008-12-24) is affected. If the install/ directory remains active after installation, remote attackers can execute arbitrary PHP code by injecting code into the Database Information > Table prefix field or obtain sensitive information via a direct request to install/install.sq...