What’s Vulnerable › Vulnerabilities

CVE-2019-7216

• Severity: high (CVSS 7.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.0% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2019-01-31 · updated 2026-06-17

Description

An issue was discovered in FileChucker 4.99e-free-e02. filechucker.cgi has a filter bypass that allows a malicious user to upload any type of file by using % characters within the extension, e.g., file.%ph%p becomes file.php.

Affected products

• Encodable Filechucker: 4.99e-free-e02, 5.09

References

• https://encodable.com/filechucker/changelog/
• https://github.com/ekultek/cve-2019-7216
• https://encodable.com/filechucker/changelog/
• https://github.com/ekultek/cve-2019-7216

Get alerted when CVE-2019-7216 or the next vulnerability affects your stack