CVE-2019-9194

NONE EPSS 99.9%
Published Feb 26, 20197y ago · Modified Jun 17, 20262w ago
Find Similar
Published Feb 26, 2019 7y ago
Last Modified Jun 17, 2026 2w ago

Description

elFinder before 2.1.48 has a command injection vulnerability in the PHP connector.

Threat Intelligence

EPSS Exploit Probability
99.9% percentile
Exploit & Patch Status
Public Exploit Known
Patch Available

Weaknesses 1

CWE-78 OS Command Injection Injection

Affected Products 1

VendorProductVersionRange
std42elfinder* <2.1.48

References 5

  • github.com https://github.com/Studio-42/elFinder/blob/master/README.md
    ProductThird Party Advisory
  • github.com https://github.com/Studio-42/elFinder/compare/6884c4f...0740028
    PatchThird Party Advisory
  • github.com https://github.com/Studio-42/elFinder/releases/tag/2.1.48
    Release NotesThird Party Advisory
  • exploit-db.com https://www.exploit-db.com/exploits/46481/
    ExploitThird Party AdvisoryVDB Entry
  • exploit-db.com https://www.exploit-db.com/exploits/46539/
    ExploitThird Party AdvisoryVDB Entry

Remediation

  • github.com https://github.com/Studio-42/elFinder/compare/6884c4f...0740028
    PatchThird Party Advisory