CVE-2019-19020

7.2 highEPSS 2.3%

High (7.2) in titanhq webtitan. EPSS 2.3% chance of exploitation in the next 30 days.

An issue was discovered in TitanHQ WebTitan before 5.18. In the administration web interface it is possible to upload a crafted backup file that enables an attacker to execute arbitrary code by overwriting existing files or adding new PHP files under the web root. This requires the attacker to have access to a valid web interface account.

Severity

CVSS 3.1

7.2 high

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS: 2.3% chance of exploitation in the next 30 days; higher than 83% of CVEs (scores of 2026-10-31)
CWE: CWE-434
Published: 2019-12-02
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

titanhq:webtitan

References

https://write-up.github.io/webtitan/
https://www.webtitan.com/resources/product-updates/
https://write-up.github.io/webtitan/
https://www.webtitan.com/resources/product-updates/

Check your stack JSON