Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An issue was discovered in Tiny Issue 1.3.1 and pixeline Bugs through 1.3.2c. install/config-setup.php allows remote attackers to execute arbitrary PHP code via the database_host parameter if the installer remains present in its original directory after installation is completed.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
tinyissue和pixeline Bugs 代码注入漏洞
Vulnerability Description
tinyissue是一套缺陷跟踪系统。pixeline Bugs是tinyissue的分支。 tinyissue 1.3.1版本和pixeline Bugs 1.3.2c及之前版本中的install/config-setup.php文件存在代码注入漏洞。远程攻击者可借助‘database_host’参数利用该漏洞执行任意的PHP代码。
CVSS Information
N/A
Vulnerability Type
N/A