{"vulnerability": "cve-2019-1216", "sightings": [{"uuid": "46c23f54-5943-4b93-9d3e-e3a758016418", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-12169", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:43.000000Z"}, {"uuid": "2ce26ac5-9fb5-4880-ab09-68a444329251", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-12169", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:10:11.000000Z"}, {"uuid": "f0d0bac1-13a3-4a26-ae2c-7abf9b955b0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-12169", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/atutor_upload_traversal.rb", "content": "", "creation_timestamp": "2020-06-29T17:08:43.000000Z"}, {"uuid": "a2934a9a-32dc-4968-8b6f-cf423a12f484", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-12167", "type": "seen", "source": "https://t.me/cve_mitre_org/145", "content": "CVE-2019-12167 httpGetSet/httpGet.htm on Emerson Network Power Liebert Challenger 5.1E0.5 devices allows XSS via the statusstr parameter. https://t.co/Xd0bYLsQzT\u2014 CVE (@CVEnew) May 22, 2019\n\nMay 22, 2019 at 09:45PM\nvia Twitter https://twitter.com/CVEnew", "creation_timestamp": "2019-05-22T18:48:27.000000Z"}, {"uuid": "b2d1aa90-a15b-4ebc-a955-d94afd9a7bc4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-12168", "type": "seen", "source": "https://t.me/cve_mitre_org/70", "content": "CVE-2019-12168 Four-Faith Wireless Mobile Router F3x24 v1.0 devices allow remote code execution via the Command Shell (aka Administration > Commands) screen. https://t.co/5fwyCizYxs\u2014 CVE (@CVEnew) May 17, 2019\n\nMay 18, 2019 at 01:45AM\nvia Twitter https://twitter.com/CVEnew", "creation_timestamp": "2019-05-17T22:51:10.000000Z"}, {"uuid": "42ae4575-68d5-4e85-ad68-a072124d46a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-12161", "type": "seen", "source": "https://t.me/cve_mitre_org/66", "content": "CVE-2019-12161 WPO WebPageTest 19.04 allows SSRF because ValidateURL in www/runtest.php does not consider octal encoding of IP addresses (such as 0300.0250 as a replacement for 192.168). https://t.co/HGxlT1GOPn\u2014 CVE (@CVEnew) May 17, 2019\n\nMay 17, 2019 at 10:45PM\nvia Twitter https://twitter.com/CVEnew", "creation_timestamp": "2019-05-17T19:46:12.000000Z"}, {"uuid": "642c9d1f-732c-4250-a3eb-66f5c57fc385", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-12163", "type": "seen", "source": "https://t.me/cve_mitre_org/69", "content": "CVE-2019-12163 GAT-Ship Web Module through 1.30 allows remote attackers to obtain potentially sensitive information via {} in a ws/gatshipWs.asmx/SqlVersion request. https://t.co/Sy5fpeafRf\u2014 CVE (@CVEnew) May 17, 2019\n\nMay 18, 2019 at 12:45AM\nvia Twitter https://twitter.com/CVEnew", "creation_timestamp": "2019-05-17T21:47:15.000000Z"}, {"uuid": "45b989b1-7f4a-46ce-ade1-16d1ba5dd712", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-12160", "type": "seen", "source": "https://t.me/cve_mitre_org/65", "content": "CVE-2019-12160 GoHTTP through 2017-07-25 has a sendHeader use-after-free. https://t.co/MI9PbU1YEt\u2014 CVE (@CVEnew) May 17, 2019\n\nMay 17, 2019 at 10:45PM\nvia Twitter https://twitter.com/CVEnew", "creation_timestamp": "2019-05-17T19:46:11.000000Z"}, {"uuid": "6b552173-f474-4d96-b81d-0996adf3e0be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-12169", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/atutor_upload_traversal.rb", "content": "{\"aliases\": [], \"arch\": \"x86, x64\", \"author\": [\"liquidsky (JMcPeters)\", \"Erik Wynter\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits an arbitrary file upload vulnerability together with\\n          a directory traversal flaw in ATutor versions 2.2.4, 2.2.2 and 2.2.1 in\\n          order to execute arbitrary commands.\\n\\n          It first creates a zip archive containing a malicious PHP file. The zip\\n          archive takes advantage of a directory traversal vulnerability that will\\n          cause the PHP file to be dropped in the root server directory (`htdocs`\\n          for Windows and `html` for Linux targets). The PHP file contains an\\n          encoded payload that allows for remote command execution on the\\n          target server. The zip archive can be uploaded via two vectors, the\\n          `Import New Language` function and the `Patcher` function. The module\\n          first uploads the archive via `Import New Language` and then attempts to\\n          execute the payload via an HTTP GET request to the PHP file  in the root\\n          server directory. If no session is obtained, the module creates another\\n          zip archive and attempts exploitation via `Patcher`.\\n\\n          Valid credentials for an ATutor admin account are required. This module\\n          has been successfully tested against ATutor 2.2.4 running on Windows 10\\n          (XAMPP server).\", \"disclosure_date\": \"2019-05-17\", \"fullname\": \"exploit/multi/http/atutor_upload_traversal\", \"is_install_path\": true, \"mod_time\": \"2025-12-17 17:11:13 +0000\", \"name\": \"ATutor 2.2.4 - Directory Traversal / Remote Code Execution,\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [], \"SideEffects\": [\"artifacts-on-disk\", \"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/multi/http/atutor_upload_traversal.rb\", \"platform\": \"Linux,Windows\", \"post_auth\": true, \"rank\": 600, \"ref_name\": \"multi/http/atutor_upload_traversal\", \"references\": [\"CVE-2019-12169\", \"URL-https://github.com/fuzzlove/ATutor-2.2.4-Language-Exploit/\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"Auto\", \"Linux\", \"Windows\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:49:42.176319Z"}]}