CVE-2015-6008 install.php in Web Reference Database (aka refbase) through 0.9.6 allows remote attackers to execute arbitrary commands via the adminPassword parameter, a different issue than CVE-2015-7381.
HighCVSS 7.5
EPSS 4.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
install.php in Web Reference Database (aka refbase) through 0.9.6 allows remote attackers to execute arbitrary commands via the adminPassword parameter, a different issue than CVE-2015-7381.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| refbase | <= 0.9.6 | No fix listed |