ByteOS Network

CVE Vulnerability Details :

CVE-2019-19576

PUBLISHED

More Info Official Page

Assigner-mitre

Assigner Org ID-8254265b-2729-46b6-b9e3-3dfca2d5bfca

Published At-04 Dec, 2019 | 17:33

Updated At-05 Aug, 2024 | 02:16

▼CVE Numbering Authority (CNA)

class.upload.php in verot.net class.upload before 1.0.3 and 2.x before 2.0.4, as used in the K2 extension for Joomla! and other products, omits .phar from the set of dangerous file extensions.

Affected Products

Vendor

n/a

Product

n/a

Versions

Affected

Problem Types

Type	CWE ID	Description
text	N/A	n/a

References

Hyperlink	Resource
https://www.verot.net/php_class_upload.htm	x_refsource_MISC
https://www.verot.net	x_refsource_MISC
https://github.com/verot/class.upload.php/compare/2.0.3...2.0.4	x_refsource_MISC
https://github.com/verot/class.upload.php/commit/5a7505ddec956fdc9e9c071ae5089865559174f1	x_refsource_MISC
https://github.com/verot/class.upload.php/compare/1.0.2...1.0.3	x_refsource_MISC
https://github.com/verot/class.upload.php/commit/db1b4fe50c1754696970d8b437f07e7b94a7ebf2	x_refsource_MISC
https://github.com/getk2/k2/commit/d1344706c4b74c2ae7659b286b5a066117155124	x_refsource_MISC
https://github.com/jra89/CVE-2019-19576	x_refsource_MISC
https://medium.com/%40jra8908/cve-2019-19576-e9da712b779	x_refsource_MISC
http://packetstormsecurity.com/files/155577/Verot-2.0.3-Remote-Code-Execution.html	x_refsource_MISC

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
https://www.verot.net/php_class_upload.htm	x_refsource_MISC x_transferred
https://www.verot.net	x_refsource_MISC x_transferred
https://github.com/verot/class.upload.php/compare/2.0.3...2.0.4	x_refsource_MISC x_transferred
https://github.com/verot/class.upload.php/commit/5a7505ddec956fdc9e9c071ae5089865559174f1	x_refsource_MISC x_transferred
https://github.com/verot/class.upload.php/compare/1.0.2...1.0.3	x_refsource_MISC x_transferred
https://github.com/verot/class.upload.php/commit/db1b4fe50c1754696970d8b437f07e7b94a7ebf2	x_refsource_MISC x_transferred
https://github.com/getk2/k2/commit/d1344706c4b74c2ae7659b286b5a066117155124	x_refsource_MISC x_transferred
https://github.com/jra89/CVE-2019-19576	x_refsource_MISC x_transferred
https://medium.com/%40jra8908/cve-2019-19576-e9da712b779	x_refsource_MISC x_transferred
http://packetstormsecurity.com/files/155577/Verot-2.0.3-Remote-Code-Execution.html	x_refsource_MISC x_transferred

Affected Products

Affected

Problem Types

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

Affected Products

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References