Security Advisory

CVE-2019-18952

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2019-11-13 22:38:17
Last updated 2024-08-05 02:02:39
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

SibSoft Xfilesharing through 2.5.1 allows cgi-bin/up.cgi arbitrary file upload. This can be combined with CVE-2019-18951 to achieve remote code execution via a .html file, containing short codes, that is served over HTTP.