VYPR
← All advisories
Critical severity9.8OSV Advisory· Published Feb 22, 2019· Updated Jun 17, 2026

CVE-2019-9002

CVE-2019-9002

Description

An issue was discovered in Tiny Issue 1.3.1 and pixeline Bugs through 1.3.2c. install/config-setup.php allows remote attackers to execute arbitrary PHP code via the database_host parameter if the installer remains present in its original directory after installation is completed.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

6
  • Tiny Issue Project/Tiny Issue
    cpe:2.3:a:tiny_issue_project:tiny_issue:1.3.1:*:*:*:*:*:*:*
  • pixeline/Bugs2 versions
    cpe:2.3:a:pixeline:bugs:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:pixeline:bugs:*:*:*:*:*:*:*:*range: <=1.3.2c
    • (no CPE)range: <=1.3.2c
  • Mikelbring/TinyissueOSV2 versions
    bugs_132, v1, v1.2, …+ 1 more
    • (no CPE)range: bugs_132, v1, v1.2, …
    • (no CPE)range: <=1.3.1
  • Tiny Issue/Tiny Issuellm-create
    Range: <=1.3.1

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.