CVE-2019-19020

An issue was discovered in TitanHQ WebTitan before 5.18

published December 2, 2019

CVSS
—
EPSS
2%
Percentile
83.4
In the wild
Unconfirmed
What it is

An issue was discovered in TitanHQ WebTitan before 5.18. In the administration web interface it is possible to upload a crafted backup file that enables an attacker to execute arbitrary code by overwriting existing files or adding new PHP files under the web root. This requires the attacker to have access to a valid web interface account.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02332 · 83.4th percentile
Published
2019-12-02T16:54Z
EPSS history
Timeline
  • 02 DEC 16:54Z
    An issue was discovered in TitanHQ WebTitan before 5.18
    cvelistv5