Critical severity9.8OSV Advisory· Published Feb 22, 2019· Updated Jun 17, 2026
CVE-2019-9002
CVE-2019-9002
Description
An issue was discovered in Tiny Issue 1.3.1 and pixeline Bugs through 1.3.2c. install/config-setup.php allows remote attackers to execute arbitrary PHP code via the database_host parameter if the installer remains present in its original directory after installation is completed.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
6bugs_132, v1, v1.2, …+ 1 more
- (no CPE)range: bugs_132, v1, v1.2, …
- (no CPE)range: <=1.3.1
- Range: <=1.3.1
- cpe:2.3:a:tiny_issue_project:tiny_issue:1.3.1:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
2- github.com/pixeline/bugs/commit/9d2d3fcdea22e94f7b497f6ed83791ab3a31ee41nvdPatchThird Party Advisory
- github.com/mikelbring/tinyissue/issues/237nvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.