Unscored CVE-2017-9741 EUVD-2017-18671GHSA-jwv9-639x-pfg4

install/make-config.php in ProjectSend r754 allows remote attackers to execute arbitrary PHP code via the dbprefix parameter, related to re…

Published Jun 18, 2017 · Updated Aug 5, 2024 · Assigned by mitre

Description

install/make-config.php in ProjectSend r754 allows remote attackers to execute arbitrary PHP code via the dbprefix parameter, related to replacing TABLES_PREFIX in the configuration file.

References

https://github.com/XiaoZhis/ProjectSend/issues/1