CVE-2019-11062CWE-78

CVE-2019-11062: vulnerability in SUNNET WMPro

SUNNET WMPro v5.0 and v5.1 has OS Command Injection

Published · Updated

Follow this CVE+ Monitor WMPro

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 5.7%
The SUNNET WMPro v5.0 and v5.1 for eLearning system has OS Command Injection via "/teach/course/doajaxfileupload.php". The target server can be exploited without authentication.
Affected products
SUNNET · WMPro
Related CVEs — SUNNET WMPro

In the same product, most dangerous first.

CVE-2023-35850HIGHSUNNET WMPro - Command InjectionEPSS 0.9%CVE-2023-35851HIGHSUNNET WMPro - SQL InjectionEPSS 0.8%