VULNERABILITY INTELLIGENCE

CVE-2019-19634

CVSS score9.8 CRITICAL
EPSS probability4.19%
CISA KEVNot currently listed
Published2019-12-17
Last modified2026-06-26
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

class.upload.php in verot.net class.upload through 1.0.3 and 2.x through 2.0.4, as used in the K2 extension for Joomla! and other products, omits .pht from the set of dangerous file extensions, a similar issue to CVE-2019-19576.

Weakness classification

  • nvd@nist.gov: CWE-434

Primary references