Lucene search
+L

CVE-2019-1010200

🗓️ 23 Jul 2019 17:15:40Reported by dwfType 
cve
 cve
🔗 web.nvd.nist.gov👁 50 Views🌐 WEB

Voice Builder pre-c145d4604d & f6660e6d8f is prone to OS Command Injection (CWE-78) allowing remote code execution with the same server privileges. Two web servers have three vulnerable remote endpoints

Related
Detection
Affected
Refs
Paths
ReporterTitlePublishedViews
Family
Cvelist
CVE-2019-1010200
23 Jul 201917:15
cvelist
EUVD
EUVD-2019-1943
7 Oct 202500:30
euvd
NVD
CVE-2019-1010200
23 Jul 201918:15
nvd
Prion
Command injection
23 Jul 201918:15
prion
RedhatCVE
CVE-2019-1010200
22 May 202510:10
redhatcve
NVD
[
  {
    "product": "Voice Builder",
    "vendor": "Voice Builder",
    "versions": [
      {
        "status": "affected",
        "version": "Prior to commit c145d4604df67e6fc625992412eef0bf9a85e26b and f6660e6d8f0d1d931359d591dbdec580fef36d36 [fixed: After commit f6660e6d8f0d1d931359d591dbdec580fef36d36]"
      }
    ]
  }
]
ParameterPositionPathDescriptionCWE
queryquery param/ttsOS command injection vulnerability in the endpoint allowing remote code execution via specially formatted query parameterCWE-78
inputquery param/ttsOS command injection vulnerability in the endpoint allowing remote code execution via specially formatted query parameterCWE-78
textquery param/ttsOS command injection vulnerability in the endpoint allowing remote code execution via specially formatted query parameterCWE-78
payloadquery param/ttsOS command injection vulnerability in the endpoint allowing remote code execution via specially formatted query parameterCWE-78
queryquery param/alignmentOS command injection vulnerability in the endpoint allowing remote code execution via specially formatted query parameterCWE-78
inputquery param/alignmentOS command injection vulnerability in the endpoint allowing remote code execution via specially formatted query parameterCWE-78
textquery param/alignmentOS command injection vulnerability in the endpoint allowing remote code execution via specially formatted query parameterCWE-78
payloadquery param/alignmentOS command injection vulnerability in the endpoint allowing remote code execution via specially formatted query parameterCWE-78
queryquery param/ttsOS command injection vulnerability in the endpoint allowing remote code execution via specially formatted query parameterCWE-78
inputquery param/ttsOS command injection vulnerability in the endpoint allowing remote code execution via specially formatted query parameterCWE-78
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

17 Jun 2026 02:09Current
9.8High risk
Vulners AI Score9.8
CVSS 39.8
CVSS 210
EPSS0.01927
50