Critical severity9.8NVD Advisory· Published Aug 26, 2019· Updated Jun 17, 2026

CVE-2019-15503

Description

cgi-cpn/xcoding/prontus_videocut.cgi in AltaVoz Prontus (aka ProntusCMS) through 12.0.3.0 has "Improper Neutralization of Special Elements used in an OS Command," allowing attackers to execute OS commands via an HTTP GET parameter.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

AltaVoz/ProntusCMSdescription
AltaVoz/Prontusllm-fuzzy
Range: <=12.0.3.0

Patches

Vulnerability mechanics

References

blog.nivel4.com/investigaciones/vulnerabilidad-de-ejecucion-de-comandos-remotos-rce-en-prontuscms/nvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000