Lucene search
K

CVE-2019-15130

🗓️ 18 Aug 2019 16:23:04Reported by mitreType 
cve
 cve
🔗 web.nvd.nist.gov👁 37 Views🌐 WEB

CVE-2019-15130 - Unauthenticated file upload in Humanica Humatrix 7 1.0.0.203 and 1.0.0.68

Related
Detection
Refs
Paths
ReporterTitlePublishedViews
Family
Cvelist
CVE-2019-15130
18 Aug 201916:23
cvelist
EUVD
EUVD-2019-6198
7 Oct 202500:30
euvd
NVD
CVE-2019-15130
18 Aug 201917:15
nvd
Prion
Design/Logic Flaw
18 Aug 201917:15
prion
RedhatCVE
CVE-2019-15130
22 May 202505:20
redhatcve
NVD
Node
humanicahumatrix_7Match1.0.0.203
OR
humanicahumatrix_7Match1.0.0.681
ParameterPositionPathDescriptionCWE
WRC01_USERIDrequest bodyrecruitment_online/personalData/act_personaltab.cfmUnauthenticated attacker can upload arbitrary file types (including executable content) to a candidate's profile picture folder via a crafted multipart POST, enabling remote code execution on the server.CWE-330

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

21 Nov 2024 04:28Current
9.3High risk
Vulners AI Score9.3
CVSS 39.8
CVSS 210
EPSS0.03362
37