Skip to content
OpenAdvisories
Unscored CVE-2018-10429 EUVD-2018-2501GHSA-2pjp-4c9p-2rhv

Cosmo 1.0.0Beta6 allows attackers to execute arbitrary PHP code via the Database Prefix field on the Database Info screen of install.php.

Published Apr 26, 2018 · Updated Sep 17, 2024 · Assigned by mitre