CVE-2019-19634
CVE-2019-19634
This page contains facts from public vulnerability sources. Check the original advisory before updating.
class.upload.php in verot.net class.upload through 1.0.3 and 2.x through 2.0.4, as used in the K2 extension for Joomla! and other products, omits .pht from the set of dangerous file extensions, a similar issue to CVE-2019-19576.
CVSS 9.8 · Critical · EPSS 4.2%
- Published
- Updated
Stack: php
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
verot/class.upload.php Packagist
- Versions
- 1.0.0
- 1.0.1
- 1.0.2
- 1.0.3
- Affected ranges
- ECOSYSTEM: ≤ 1.0.3
No fix published
verot/class.upload.php Packagist
- Versions
- 2.0.0
- 2.0.1
- 2.0.2
- 2.0.3
- 2.0.4
- Affected ranges
- ECOSYSTEM: ≥ 2.0.0, ≤ 2.0.4
No fix published