CVE:CVE-2019-19634
CNNVD:CNNVD-201912-806
class.upload.php 1.0.3及之前版本和2.x版本至2.0.4版本中存在安全漏洞。攻击者可利用该漏洞上传任意文件并执行代码。
solution:Upgrade verot_project verot to a higher version than 1.0.3,2.0.4,and avoid the version (,1.0.3),[2.0.0,2.0.4); Upgrade getk2 k2 to a higher version than 2.10.1,and avoid the version (,2.10.1]