CVE-2019-9194

PoC ×2—

CVSS 3.0

9.8 critical

EPSS

97%p100

Published

Feb 26, 2019 (Feb 26, 2019)

Modified

Jun 17, 2026

Description

elFinder before 2.1.48 has a command injection vulnerability in the PHP connector.

Vendors: std42
Products: elfinder
Weakness: CWE-78
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (96.7%)

In the news1 stories

KashmirBlack, a new botnet in the threat landscape that rapidly grows

Security AffairsOct 26, 17:09 UTC · Oct 26, 2020Malware CVE-2017-9841 CVE-2018-9206 CVE-2019-9194+4 CVEs

47