CVE-2019-19943

PoC —

CVSS 3.1

7.5 high

EPSS

4%p91

Published

Feb 28, 2020 (Feb 28, 2020)

Modified

Jun 17, 2026

Description

The HTTP service in quickweb.exe in Pablo Quick 'n Easy Web Server 3.3.8 allows Remote Unauthenticated Heap Memory Corruption via a large host or domain parameter. It may be possible to achieve remote code execution because of a double free.

Vendors: pablosoftwaresolutions
Products: quick \'n easy web server
Weakness: CWE-415, CWE-787
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (4.3%)

In the news0 stories

No ingested article mentions this CVE yet.