ID:5831 - Exploit for Arbitrary file upload in class.upload.php - CVE-2019-19576

 
Main Vulnerability Database Exploits ID:5831 - Exploit for Arbitrary file upload in class.upload.php - CVE-2019-19576

ID:5831 - Exploit for Arbitrary file upload in class.upload.php - CVE-2019-19576

Published: June 17, 2021


Vulnerability identifier: #VU23560
Vulnerability risk: High
CVE-ID: CVE-2019-19576
CWE-ID: CWE-434
Exploitation vector: Remote access
Vulnerable software:
class.upload.php

Link to public exploit:


Vulnerability description

The vulnerability allows a remote attacker to compromise vulnerable system.

The vulnerability exists due to insufficient validation of file uploads in "class.upload.php" in "verot.net". A remote attacker can upload and execute arbitrary file on the server.


Remediation

Install updates from vendor's website.