Hosts vulnerable to CVE-2019-8943

CVE-2019-8943 — severity medium, CVSS 6.5 — 3 affected hosts indexed by QROS Explore.

About CVE-2019-8943

WordPress through 5.0.3 allows Path Traversal in wp_crop_image(). An attacker (who has privileges to crop an image) can write the output image to an arbitrary directory via a filename containing two image extensions and ../ sequences, such as a filename ending with the .jpg?/../../file.jpg substring

Showing 3 of 3 hosts, ranked by risk score.

ec2-3-20-134-2.us-east-2.compute.amazonaws.com (3.20.134.2)

United States · Dublin

3 open ports · 83 CVE · risk 98/100 · critical

http, ssh

ec2-3-37-192-205.ap-northeast-2.compute.amazonaws.com (3.37.192.205)

South Korea · Incheon

2 open ports · 137 CVE · risk 98/100 · critical

http

ec2-3-23-252-243.us-east-2.compute.amazonaws.com (3.23.252.243)

United States · Dublin

2 open ports · 150 CVE · risk 98/100 · critical

http

Search all CVE-2019-8943 hosts in Explore

Open in Explore →