CVE-2019-17058

Severity: critical (CVSS 9.1 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2019-11-18 · updated 2026-06-17
Weakness: CWE-434

Description

Footy Tipping Software AFL Web Edition 2019 allows arbitrary file upload and resultant remote code execution because a whitelist can be bypassed by an Administrator who uploads a crafted upload.dat file.

Affected products

Footy Tipping Software: 2019

References

https://blog.contentsecurity.com.au/footy-tipping-software-whitelisting-bypass
https://blog.contentsecurity.com.au/footy-tipping-software-whitelisting-bypass

Get alerted when CVE-2019-17058 or the next vulnerability affects your stack