Critical severity9.8NVD Advisory· Published Nov 13, 2019· Updated Jun 17, 2026

CVE-2019-18952

Description

SibSoft Xfilesharing through 2.5.1 allows cgi-bin/up.cgi arbitrary file upload. This can be combined with CVE-2019-18951 to achieve remote code execution via a .html file, containing short codes, that is served over HTTP.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Sibsoft/Xfilesharingllm-fuzzy2 versions
<=2.5.1+ 1 more
- (no CPE)range: <=2.5.1
- cpe:2.3:a:sibsoft:xfilesharing:*:*:*:*:*:*:*:*range: <=2.5.1
SibSoft/Xfilesharingdescription

Patches

Vulnerability mechanics

References

packetstormsecurity.com/files/155324/Xfilesharing-2.5.1-Local-File-Inclusion-Shell-Upload.htmlnvdExploitIssue TrackingThird Party Advisory
gist.github.com/pak0s/af9f640170aed335fdf6d110d468dbcenvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.036
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000