An issue was discovered in Tiny Issue 1.3.1 and pixeline Bugs through 1.3.2c. install/config-setup.php allows remote attackers to execute arbitrary PHP code via the database_host parameter if the installer remains present in its original directory after installation is completed.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2019-02-22T06:00:00Z

Updated: 2024-09-17T04:09:40.668Z

Reserved: 2019-02-22T00:00:00Z

Link: CVE-2019-9002

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2019-02-22T07:29:00.240

Modified: 2024-11-21T04:50:47.490

Link: CVE-2019-9002

cve-icon Redhat

No data.