CVE-2019-19020 | BDVDB-2026-126921 Detail

Description#

An issue was discovered in TitanHQ WebTitan before 5.18. In the administration web interface it is possible to upload a crafted backup file that enables an attacker to execute arbitrary code by overwriting existing files or adding new PHP files under the web root. This requires the attacker to have access to a valid web interface account.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://write-up.github.io/webtitan/
https://www.webtitan.com/resources/product-updates/

Exploit#

No public exploit known

History#

Version 12019-12-02Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.