CVE-2019-19745

Published: Dec 17, 2019Modified: Nov 21, 2024

8.8

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: NVD

Description

Contao 4.0 through 4.8.5 allows PHP local file inclusion. A back end user with access to the form generator can upload arbitrary files and execute them on the server.

Affected (9)

Products: Contao: Contao

Contao

1 product

Contao

Configuration A

9 vulnerable

Vulnerable Software	Affected Versions
Contao Contao	From 4.4 to 4.4.45
Contao Contao	From 4.8 to 4.8.5
Contao Contao	Version 4.0
Contao Contao	Version 4.1
Contao Contao	Version 4.2
Contao Contao	Version 4.3
Contao Contao	Version 4.5
Contao Contao	Version 4.6
Contao Contao	Version 4.7