CVE-2019-18952

PoC ×2—

CVSS 3.1

9.8 critical

EPSS

45%p99

Published

Nov 13, 2019 (Nov 13, 2019)

Modified

Jun 17, 2026

Description

SibSoft Xfilesharing through 2.5.1 allows cgi-bin/up.cgi arbitrary file upload. This can be combined with CVE-2019-18951 to achieve remote code execution via a .html file, containing short codes, that is served over HTTP.

Vendors: sibsoft
Products: xfilesharing
Weakness: CWE-434
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (45.4%)

In the news1 stories

Infostealers increasingly impact global security

Help Net SecurityNov 13, 00:00 UTC · Nov 13, 2024Malware CVE-2010-4598 CVE-2011-2474 CVE-2014-0130+15 CVEs