critical9.8
CVE-2018-10429
Cosmo 1.0.0Beta6 allows attackers to execute arbitrary PHP code via the Database Prefix field on the Database Info screen of install.php.
Impact
Cosmo 1.0.0Beta6 allows attackers to execute arbitrary PHP code via the Database Prefix field on the Database Info screen of install.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cosmocms | Cosmo | Version 1.0.0 |