CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

2 matches found

Rapid7 Vulnerability Database (full)•added 2019/12/17 12:00 a.m.•3 views

CVE-2019-19634: Unrestricted Upload of File with Dangerous Type

class.upload.php in verot.net class.upload through 1.0.3 and 2.x through 2.0.4, as used in the K2 extension for Joomla! and other products, omits .pht from the set of dangerous file extensions, a similar issue to CVE-2019-19576...

9.8CVSS8.2AI score0.04187EPSS

SaveExploits3References6

Rapid7 Vulnerability Database (full)•added 2019/12/04 12:00 a.m.•1 views

CVE-2019-19576: Unrestricted Upload of File with Dangerous Type

class.upload.php in verot.net class.upload before 1.0.3 and 2.x before 2.0.4, as used in the K2 extension for Joomla! and other products, omits .phar from the set of dangerous file extensions...

9.8CVSS8AI score0.2638EPSS

SaveExploits7References18

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by