What’s Vulnerable › Vulnerabilities
CVE-2018-19692
- Severity: critical (CVSS 9.8 v3.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 1.5% probability of exploitation in the next 30 days
- Public exploit or detection template: yes
- Published: 2018-11-29 · updated 2026-06-17
- Weakness: CWE-434
Description
An issue was discovered in tp5cms through 2017-05-25. admin.php/upload/picture.html allows remote attackers to execute arbitrary PHP code by uploading a .php file with the image/jpeg content type.
Affected products
- Tp5Cms Project Tp5Cms: through 2017-05-25
References
Get alerted when CVE-2018-19692 or the next vulnerability affects your stack