CVE:CVE-2019-19576
CNNVD:CNNVD-201912-179
class.upload.php是此类为您管理文件上传。
class.upload.php存在代码问题漏洞，该漏洞源于程序没有正确验证文件扩展名。远程攻击者可借助特制HTTP请求利用该漏洞在系统上执行任意PHP代码。
solution:Upgrade verot_project verot to a higher version than 1.0.3,2.0.4,and avoid the version (,1.0.3),[2.0.0,2.0.4); Upgrade getk2 k2 to a higher version than 2.10.1,and avoid the version (,2.10.1]