Description
SibSoft Xfilesharing through 2.5.1 allows cgi-bin/up.cgi arbitrary file upload. This can be combined with CVE-2019-18951 to achieve remote code execution via a .html file, containing short codes, that is served over HTTP.
Automated scanner template
A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.
- Xfilesharing 2.5.1 - Arbitrary File Upload http/cves/2019/CVE-2019-18952.yaml
Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.