CVE-2019-15746

2019-10-0711:29:30

mitre

www.cve.org

AI Score

9.6

Confidence

High

EPSS

0.016

Percentile

87.5%

JSON

SITOS six Build v6.2.1 allows an attacker to inject arbitrary PHP commands. As a result, an attacker can compromise the running server and execute system commands in the context of the web user.

References

www.contextis.com/en/resources/advisories/cve-2019-15746