CVE-2019-7719

9.8 criticalEPSS 1.7%

Critical (9.8) in nibbleblog nibbleblog. EPSS 1.7% chance of exploitation in the next 30 days.

Nibbleblog 4.0.5 allows eval injection by placing PHP code in the install.php username parameter and then making a content/private/shadow.php request.

Severity

CVSS 3.0

9.8 critical

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.7% chance of exploitation in the next 30 days; higher than 77% of CVEs (scores of 2026-10-31)
CWE: CWE-94
Published: 2019-02-11
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

nibbleblog:nibbleblog

References

https://github.com/dignajar/nibbleblog/issues/138
https://github.com/dignajar/nibbleblog/issues/138

Check your stack JSON