What’s Vulnerable › Vulnerabilities

CVE-2019-7692

• Severity: critical (CVSS 9.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.2% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2019-02-10 · updated 2026-06-17
• Weakness: CWE-94

Description

install/install.php in CIM 0.9.3 allows remote attackers to execute arbitrary PHP code via a crafted prefix value because of configuration file mishandling in the N=83 case, as demonstrated by a call to the PHP fputs function that creates a .php file in the public folder.

Affected products

• Cim Project Cim: 0.9.3

References

• https://github.com/AvaterXXX/CVEs/blob/master/cim.md#getshell
• https://github.com/AvaterXXX/CVEs/blob/master/cim.md#getshell

Get alerted when CVE-2019-7692 or the next vulnerability affects your stack