CVE-2019-16059

PoC —

CVSS 3.0

8.8 high

EPSS

<1%p47

Published

Sep 6, 2019 (Sep 6, 2019)

Modified

Jun 17, 2026

Description

Sentrifugo 3.2 lacks CSRF protection. This could lead to an attacker tricking the administrator into executing arbitrary code at index.php/dashboard/viewprofile via a crafted HTML page.

Vendors: sapplica
Products: sentrifugo
Weakness: CWE-352
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.6%)

In the news0 stories

No ingested article mentions this CVE yet.