Lucene search
MitreCVELIST:CVE-2019-9581HistoryMar 06, 2019 - 12:00 a.m.
CVE-2019-9581
2019-03-0600:00:00
mitre
www.cve.org
3
phpscheduleit Booked Scheduler 2.7.5 allows arbitrary file upload via the Favicon field, leading to execution of arbitrary Web/custom-favicon.php PHP code, because Presenters/Admin/ManageThemePresenter.php does not ensure an image file extension.
Related
packetstorm
packetstorm
Booked Scheduler 2.7.5 Shell Upload
2021-12-14 00:00:00
nvd
nvd
CVE-2019-9581
2019-03-06 00:29:01
zdt
zdt
Booked Scheduler 2.7.5 - Remote Command Execution Exploit
2021-12-14 00:00:00
prion
prion
Default credentials
2019-03-06 00:29:00
cve
cve
CVE-2019-9581
2019-03-06 00:29:01
exploitdb
exploitdb
Booked Scheduler 2.7.5 - Remote Command Execution (RCE) (Authenticated)
2021-12-14 00:00:00