From 3aad5ed8bb4eb81e28be3616b0be3328360f64ce Mon Sep 17 00:00:00 2001
From: CVE Team <cve-request@mitre.org>
Date: Thu, 10 Jan 2019 09:05:50 -0500
Subject: [PATCH] - Synchronized data.

---
 2019/5xxx/CVE-2019-5885.json | 18 +++++++++++
 2019/5xxx/CVE-2019-5886.json | 62 ++++++++++++++++++++++++++++++++++++
 2019/5xxx/CVE-2019-5887.json | 62 ++++++++++++++++++++++++++++++++++++
 3 files changed, 142 insertions(+)
 create mode 100644 2019/5xxx/CVE-2019-5885.json
 create mode 100644 2019/5xxx/CVE-2019-5886.json
 create mode 100644 2019/5xxx/CVE-2019-5887.json

diff --git a/2019/5xxx/CVE-2019-5885.json b/2019/5xxx/CVE-2019-5885.json
new file mode 100644
index 00000000000..15bb90ca373
--- /dev/null
+++ b/2019/5xxx/CVE-2019-5885.json
@@ -0,0 +1,18 @@
+{
+   "CVE_data_meta" : {
+      "ASSIGNER" : "cve@mitre.org",
+      "ID" : "CVE-2019-5885",
+      "STATE" : "RESERVED"
+   },
+   "data_format" : "MITRE",
+   "data_type" : "CVE",
+   "data_version" : "4.0",
+   "description" : {
+      "description_data" : [
+         {
+            "lang" : "eng",
+            "value" : "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided."
+         }
+      ]
+   }
+}
diff --git a/2019/5xxx/CVE-2019-5886.json b/2019/5xxx/CVE-2019-5886.json
new file mode 100644
index 00000000000..8ca34532d47
--- /dev/null
+++ b/2019/5xxx/CVE-2019-5886.json
@@ -0,0 +1,62 @@
+{
+   "CVE_data_meta" : {
+      "ASSIGNER" : "cve@mitre.org",
+      "ID" : "CVE-2019-5886",
+      "STATE" : "PUBLIC"
+   },
+   "affects" : {
+      "vendor" : {
+         "vendor_data" : [
+            {
+               "product" : {
+                  "product_data" : [
+                     {
+                        "product_name" : "n/a",
+                        "version" : {
+                           "version_data" : [
+                              {
+                                 "version_value" : "n/a"
+                              }
+                           ]
+                        }
+                     }
+                  ]
+               },
+               "vendor_name" : "n/a"
+            }
+         ]
+      }
+   },
+   "data_format" : "MITRE",
+   "data_type" : "CVE",
+   "data_version" : "4.0",
+   "description" : {
+      "description_data" : [
+         {
+            "lang" : "eng",
+            "value" : "An issue was discovered in ShopXO 1.2.0. In the application\\install\\controller\\Index.php file, there is no validation lock file in the Add method, which allows an attacker to reinstall the database. The attacker can write arbitrary code to database.php during system reinstallation."
+         }
+      ]
+   },
+   "problemtype" : {
+      "problemtype_data" : [
+         {
+            "description" : [
+               {
+                  "lang" : "eng",
+                  "value" : "n/a"
+               }
+            ]
+         }
+      ]
+   },
+   "references" : {
+      "reference_data" : [
+         {
+            "name" : "https://github.com/gongfuxiang/shopxo/issues/1",
+            "refsource" : "MISC",
+            "url" : "https://github.com/gongfuxiang/shopxo/issues/1"
+         }
+      ]
+   }
+}
diff --git a/2019/5xxx/CVE-2019-5887.json b/2019/5xxx/CVE-2019-5887.json
new file mode 100644
index 00000000000..8ef647e5c62
--- /dev/null
+++ b/2019/5xxx/CVE-2019-5887.json
@@ -0,0 +1,62 @@
+{
+   "CVE_data_meta" : {
+      "ASSIGNER" : "cve@mitre.org",
+      "ID" : "CVE-2019-5887",
+      "STATE" : "PUBLIC"
+   },
+   "affects" : {
+      "vendor" : {
+         "vendor_data" : [
+            {
+               "product" : {
+                  "product_data" : [
+                     {
+                        "product_name" : "n/a",
+                        "version" : {
+                           "version_data" : [
+                              {
+                                 "version_value" : "n/a"
+                              }
+                           ]
+                        }
+                     }
+                  ]
+               },
+               "vendor_name" : "n/a"
+            }
+         ]
+      }
+   },
+   "data_format" : "MITRE",
+   "data_type" : "CVE",
+   "data_version" : "4.0",
+   "description" : {
+      "description_data" : [
+         {
+            "lang" : "eng",
+            "value" : "An issue was discovered in ShopXO 1.2.0. In the UnlinkDir method of the FileUtil.php file, the input parameters are not checked, resulting in input mishandling by the rmdir method. Attackers can delete arbitrary files by using \"../\" directory traversal."
+         }
+      ]
+   },
+   "problemtype" : {
+      "problemtype_data" : [
+         {
+            "description" : [
+               {
+                  "lang" : "eng",
+                  "value" : "n/a"
+               }
+            ]
+         }
+      ]
+   },
+   "references" : {
+      "reference_data" : [
+         {
+            "name" : "https://github.com/gongfuxiang/shopxo/issues/2",
+            "refsource" : "MISC",
+            "url" : "https://github.com/gongfuxiang/shopxo/issues/2"
+         }
+      ]
+   }
+}