VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Aug 26, 2019· Updated Jun 17, 2026

CVE-2019-15524

CVE-2019-15524

Description

CSZ CMS 1.2.3 allows arbitrary file upload, as demonstrated by a .php file to admin/filemanager in the File Management Module, which leads to remote code execution by visiting a photo/upload/2019/ URI.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • CSZ/CMSdescription
  • CSZ CMS/cszcmsllm-fuzzy2 versions
    =1.2.3+ 1 more
    • (no CPE)range: =1.2.3
    • cpe:2.3:a:cszcms:csz_cms:1.2.3:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.

CVE-2019-15524 · Critical · VYPR