CVE-2019-15503

—

CVSS 3.0

9.8 critical

EPSS

2%p83

Published

Aug 26, 2019 (Aug 26, 2019)

Modified

Jun 17, 2026

Description

cgi-cpn/xcoding/prontus_videocut.cgi in AltaVoz Prontus (aka ProntusCMS) through 12.0.3.0 has "Improper Neutralization of Special Elements used in an OS Command," allowing attackers to execute OS commands via an HTTP GET parameter.

Vendors: altavoz
Products: prontuscms
Weakness: CWE-78
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (2.4%)

In the news0 stories

No ingested article mentions this CVE yet.