Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2019-9002

An issue was discovered in Tiny Issue 1.3.1 and pixeline Bugs through 1.3.2c. install/config-setup.php allows remote attackers to execute arbitrary PHP code via the database_host parameter if the installer remains present in its original directory after installation is completed.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.008
EPSS Ranking 73.7%
CVSS Severity
CVSS v3 Score 9.8
CVSS v2 Score 7.5
Products affected by CVE-2019-9002
  • Pixeline » Bugs » Version: 1.0
    cpe:2.3:a:pixeline:bugs:1.0
  • Pixeline » Bugs » Version: 1.1
    cpe:2.3:a:pixeline:bugs:1.1
  • Pixeline » Bugs » Version: 1.1.1
    cpe:2.3:a:pixeline:bugs:1.1.1
  • Pixeline » Bugs » Version: 1.2
    cpe:2.3:a:pixeline:bugs:1.2
  • Pixeline » Bugs » Version: 1.2.1
    cpe:2.3:a:pixeline:bugs:1.2.1
  • Pixeline » Bugs » Version: 1.2.2
    cpe:2.3:a:pixeline:bugs:1.2.2
  • Pixeline » Bugs » Version: 1.2.3
    cpe:2.3:a:pixeline:bugs:1.2.3
  • Pixeline » Bugs » Version: 1.3
    cpe:2.3:a:pixeline:bugs:1.3
  • Pixeline » Bugs » Version: 1.3.1
    cpe:2.3:a:pixeline:bugs:1.3.1
  • Pixeline » Bugs » Version: 1.3.2
    cpe:2.3:a:pixeline:bugs:1.3.2
  • Pixeline » Bugs » Version: 1.3.2b
    cpe:2.3:a:pixeline:bugs:1.3.2b
  • Pixeline » Bugs » Version: 1.3.2c
    cpe:2.3:a:pixeline:bugs:1.3.2c
  • Tiny Issue Project » Tiny Issue » Version: 1.3.1
    cpe:2.3:a:tiny_issue_project:tiny_issue:1.3.1


Products
Pricing
Contact Us

Shodan ® - All rights reserved