jra89/CVE-2019-19634

jra89/CVE-2019-19634

GitHubGitHub
GitHubgithub.com
Releases0
Stars36
This is a filter bypass exploit that results in arbitrary file upload and remote code execution in class.upload.php <= 2.0.4
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2019-19634↗
9.8 CRITICAL7.5 HIGH

class.upload.php in verot.net class.upload through 1.0.3 and 2.x through 2.0.4, as used in the K2 extension for Joomla! and other products, omits .pht from the set of dangerous file extensions, a similar issue to CVE-2019-19576.