PT-2019-15875 · Php · Class.Upload.Php

Jra89 · Published 2019-12-04 · Updated 2020-01-16 · CVE-2019-19576

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions class.upload.php versions prior to 1.0.3 class.upload.php versions 2.x prior to 2.0.4

Description The issue is related to the omission of .phar from the set of dangerous file extensions in class.upload.php, which can be exploited for remote code execution.

Recommendations For versions prior to 1.0.3, update to version 1.0.3 or later. For versions 2.x prior to 2.0.4, update to version 2.0.4 or later.

Exploit

Fix

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

CVE-2019-19576

GHSA-R5GM-4P5W-PQ2P

Affected Products

Class.Upload.Php

References · 16

• 🔥 https://github.com/jra89/CVE-2019-19576 · Exploit
• 🔥 https://medium.com/@jra8908/cve-2019-19576-e9da712b779 · Exploit
• 🔥 http://packetstormsecurity.com/files/155577/Verot-2.0.3-Remote-Code-Execution.html · Exploit
• 🔥 https://exploit-db.com/exploits/47749 · Exploit
• https://github.com/verot/class.upload.php/compare/2.0.3...2.0.4 · Patch
• https://github.com/verot/class.upload.php/commit/db1b4fe50c1754696970d8b437f07e7b94a7ebf2 · Patch
• https://github.com/verot/class.upload.php/compare/1.0.2...1.0.3 · Patch
• https://github.com/verot/class.upload.php/commit/5a7505ddec956fdc9e9c071ae5089865559174f1 · Patch
• https://github.com/getk2/k2/commit/d1344706c4b74c2ae7659b286b5a066117155124 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2019-19576 · Security Note
• https://verot.net/php_class_upload.htm · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-r5gm-4p5w-pq2p · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-19576 · Vendor Advisory
• https://verot.net · Note
• https://medium.com/%40jra8908/cve-2019-19576-e9da712b779 · Note