Description

install/index.php in EspoCRM before 2.6.0 allows remote attackers to re-install the application via a 1 value in the installProcess parameter.

Remediation

References

CVE-2014-7986

Related Vulnerabilities

WordPress 3.9.x Multiple Vulnerabilities (3.9 - 3.9.13)

IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-4445)

WordPress Plugin PI Button includes Backdoor [Only if downloaded via the vendor website] (3.3.3)

Drupal Core 9.1.x Cross-Site Scripting (9.1.0 - 9.1.6)

WordPress Plugin MiwoFTP-File & Folder Manager Arbitrary File Disclosure (1.0.4)

Severity

Medium

Classification

CVE-2014-7986 CWE-264

Tags

Missing Update Known Vulnerabilities