Home
Home
Trends
Trends
Vulnerabilities
Vulnerabilities
News
News
Researchers
Researchers
Why dbugs?
Why dbugs?
Settings

Keyur-Mehta

#60039of 60,591
2.7Total CVSS
Vulnerabilities · 1
PT-2026-55455
2026-07-02
2.7
CVE-2026-49292
Kiwi Tcms
Kiwi Tcms
The `/init-db/` endpoint, used for initial database setup via a browser, remains accessible and responds to requests even after the initial setup is complete. This endpoint does not require authentication as it is intended for use before user accounts are created. The page acts as a proxy for the `/Kiwi/manage.py migrate` command, which is reentrant, meaning repeated executions do not alter the application state, cause data loss, or reveal confidential information.