cve/2019/CVE-2019-18952.md
2025-09-29 21:09:30 +02:00

764 B

CVE-2019-18952

Description

SibSoft Xfilesharing through 2.5.1 allows cgi-bin/up.cgi arbitrary file upload. This can be combined with CVE-2019-18951 to achieve remote code execution via a .html file, containing short codes, that is served over HTTP.

POC

Reference

Github