Lucene search
PRIOn knowledge basePRION:CVE-2019-19502HistoryDec 02, 2019 - 4:15 p.m.
Code injection
2019-12-0216:15:00
PRIOn knowledge base
www.prio-n.com
2
Code injection in pluginconfig.php in Image Uploader and Browser for CKEditor before 4.1.9 allows remote authenticated users to execute arbitrary PHP code.
| CPE | Name | Operator | Version |
|---|---|---|---|
| image_uploader_and_browser_for_ckeditor | lt | 4.1.9 |
References
github.com/xsmo/Image-Uploader-and-Browser-for-CKEditor/commit/c293d38c8b99444e775d94c1af50c9676c6544d2
github.com/xsmo/Image-Uploader-and-Browser-for-CKEditor/compare/4.1.8...v4.1.9
github.com/xsmo/Image-Uploader-and-Browser-for-CKEditor/pull/11
github.com/xsmo/Image-Uploader-and-Browser-for-CKEditor/pull/11/commits/5c7a6b0e10504f08e2f50655541b767e276ce749
visat.me/security/cve-2019-19502/
Related
cvelist
cvelist
CVE-2019-19502
2019-12-02 15:14:20
nvd
nvd
CVE-2019-19502
2019-12-02 16:15:12
osv
osv
CVE-2019-19502
2019-12-02 16:15:12
cve
cve
CVE-2019-19502
2019-12-02 16:15:12