Skip to content
NewA calmer, faster ZeroHour
VulnerabilityPoC ×22

CVE-2019-18952

CVSS 3.1
9.8 critical
EPSS
44%p99
Published
·
Modified
Analyze CVE-2019-18952 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

SibSoft Xfilesharing through 2.5.1 allows cgi-bin/up.cgi arbitrary file upload. This can be combined with CVE-2019-18951 to achieve remote code execution via a .html file, containing short codes, that is served over HTTP.

Vendors
sibsoft
Products
xfilesharing
Weakness
CWE-434
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD CVE.org GitHub PoCs EPSS (44.4%)

In the news

1 story