RCE exists in cosmocms 1.0.0 beta6 install.php file

[ApexSecLabs]

Enter payload for the database name, and you can see the successful execution of the command when submitting
payload test';system(dir);'