Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: Verot Project Component: Verot Clear all filters
TI-2019-14148 CVE-2019-19634 · GHSA-2gc7-w4hw-rr2m

class.upload.php in verot.net class.upload through 1.0.3 and 2.x through 2.0.4, as used…

Priority MEDIUM 49

class.upload.php in verot.net class.upload through 1.0.3 and 2.x through 2.0.4, as used in the K2 extension for Joomla! and other products, omits .pht from the set of dangerous file extensions, a similar issue to CVE-201…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04187 Published 2019-12-17 No fix listed CWE-434