CVE-2019-15746 - SITOS six Build v6.2.1 allows an attacker to inject arbitrary PHP commands

Back Back to CVE browser

CRITICAL

SITOS six Build v6.2.1 allows an attacker to inject arbitrary PHP commands

Published Oct 7, 2019

9.8

CRITICAL

CVSS 3.1

EPSS 1.86%

Description

SITOS six Build v6.2.1 allows an attacker to inject arbitrary PHP commands. As a result, an attacker can compromise the running server and execute system commands in the context of the web user.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-78

OS Command Injection

CWE-94

Code Injection

References (1)

https://www.contextis.com/en/resources/advisories/cve-2019-15746
x_refsource_MISCThird Party Advisory

Link	Providers	Tags
https://www.contextis.com/en/resources/advisories/cve-2019-15746		x_refsource_MISCThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Oct 7, 2019

Updated Aug 5, 2024

Reserved Aug 28, 2019

Link CVE-2019-15746

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2019-15746

Red Hat

Severity n/a

Public date n/a

Links CVE-2019-15746