high8.8Public exploit code
CVE-2019-15813
Multiple file upload restriction bypass vulnerabilities in Sentrifugo 3.2 could allow authenticated users to execute arbitrary code via a webshell.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Sentrifugo 3.2 - File Upload Restriction Bypass (Authenticated)2020-10-27 · webapps · php
- Sentrifugo 3.2 - File Upload Restriction Bypass2019-08-30 · webapps · php
Impact
Multiple file upload restriction bypass vulnerabilities in Sentrifugo 3.2 could allow authenticated users to execute arbitrary code via a webshell.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sentrifugo | Sentrifugo | Version 3.2 |