AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2018-5749

CRITICAL · CVSS 9.8 EPSS 2.48%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2018-01-23 · Last synced 2026-08-04

CyberRota Analysis

This is a critical severity vulnerability with a CVSS score of 9.8. It may be remotely exploitable.

CVE
CVE-2018-5749
Severity
CRITICAL
CVSS
9.8
EPSS
2.48%

Original NVD Description

install.php in Minecraft Servers List Lite before commit c1cd164 and Premium Minecraft Servers List before 2.0.4 does not sanitize input before saving database connection information in connect.php, which might allow remote attackers to execute arbitrary PHP code via the (1) database_server, (2) database_user, (3) database_password, or (4) database_name parameter.