AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2019-1010062

CRITICAL · CVSS 9.8 EPSS 1.81% Public Exploit

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2019-07-16 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

GitHub PoC Links
github.com ↗ github.com ↗

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2019-1010062
Severity
CRITICAL
CVSS
9.8
EPSS
1.81%

Original NVD Description

PluckCMS 4.7.4 and earlier is affected by: CWE-434 Unrestricted Upload of File with Dangerous Type. The impact is: get webshell. The component is: data/inc/images.php line36. The attack vector is: modify the MIME TYPE on HTTP request to upload a php file. The fixed version is: after commit 09f0ab871bf633973cfd9fc4fe59d4a912397cf8.