Description
install/make-config.php in ProjectSend r754 allows remote attackers to execute arbitrary PHP code via the dbprefix parameter, related to replacing TABLES_PREFIX in the configuration file.
Remediation
References
Related Vulnerabilities
phpBB Weak Password Recovery Mechanism for Forgotten Password Vulnerability (CVE-2026-29199)
Joomla! Core 1.5.x Session Hijacking (1.5.0 - 1.5.8)
Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2008-6125)
WordPress Plugin Question and Answer Forum 'title' Variable Cross-Site Scripting (1.2.4)
WordPress Plugin Booking Calendar Local File Inclusion (7.0)