{"vulnerability": "cve-2019-1622", "sightings": [{"uuid": "26a1eed8-550d-4cb7-8b9f-7b54b9697839", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-1622", "type": "exploited", "source": "https://www.exploit-db.com/exploits/47347", "content": "", "creation_timestamp": "2019-09-03T00:00:00.000000Z"}, {"uuid": "542bc3af-175a-4c10-93b9-b5a115696fc1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-1622", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:44.000000Z"}, {"uuid": "e789d74c-81f2-4bed-9fa5-5e9de9401ab6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-1622", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:10:13.000000Z"}, {"uuid": "ba42ad1c-a565-4da7-bcca-a5bbef3e5f26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-1622", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/cisco_dcnm_upload_2019.rb", "content": "", "creation_timestamp": "2019-09-02T15:56:25.000000Z"}, {"uuid": "2738b9e4-cd27-4cf4-8761-87dee563e760", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-1622", "type": "seen", "source": "https://t.me/pwnwiki_zhchannel/846", "content": "CVE-2019-10677 DASAN Zhone ZNID GPON 2426A EU Multiple XSS\u6f0f\u6d1e\nCVE-2019-1619&CVE-2019-1622 Cisco Data Center Network Manager \u9060\u7a0b\u4ee3\u78bc\u57f7\u884c\u6f0f\u6d1e\nCVE-2019-15081 Opencart 3.x XSS\u6f0f\u6d1e\nCVE-2019-15814 Sentrifugo 3.2 XSS\u6f0f\u6d1e\nCVE-2011-2921 ktsuss 1.4 suid \u6b0a\u9650\u63d0\u5347\u6f0f\u6d1e\nCVE-2019-16197 Dolibarr ERP-CRM 10.0.1 XSS\u6f0f\u6d1e\nCVE-2019-16119 WordPress Plugin Photo Gallery 1.5.34 SQL\u6ce8\u5165\u6f0f\u6d1e\nCVE-2019-16068 Enigma NMS 65.0.0 CSRF\u6f0f\u6d1e\nCVE-2019-16065 Enigma NMS 65.0.0 SQL\u6ce8\u5165\u6f0f\u6d1e\nCVE-2015-5287 ABRT sosreport \u672c\u5730\u6b0a\u9650\u63d0\u5347\u6f0f\u6d1e\nCVE-2019-16701 pfSense 2.3.4&2.4.4-p3 \u9060\u7a0b\u4ee3\u78bc\u6ce8\u5165\u6f0f\u6d1e\nCVE-2019-16679 Gila CMS \u672c\u5730\u6587\u4ef6\u5305\u542b\u6f0f\u6d1e\nCVE-2019-17080 mintinstall 7.9.9 \u4ee3\u78bc\u57f7\u884c\u6f0f\u6d1e\nCVE-2019-12562 DotNetNuke XSS\u6f0f\u6d1e\nCVE-2015-5287 ABRT sosreport \u6b0a\u9650\u63d0\u5347\u6f0f\u6d1e\nCVE-2019-5485 NPMJS gitlabhook 0.0.17 \u9060\u7a0b\u4ee3\u78bc\u57f7\u884c\u6f0f\u6d1e\nCVE-2019-17132 vBulletin 5.5.4 \u9060\u7a0b\u4ee3\u78bc\u57f7\u884c\u6f0f\u6d1e\nCVE-2019-17271 vBulletin 5.5.4 SQL\u6ce8\u5165\u6f0f\u6d1e\nCVE-2019-17225 Subrion 4.2.1 XSS\u6f0f\u6d1e\nCVE-2019-15741 GitLab Omnibus 12.2.1 Logrotate \u6b0a\u9650\u63d0\u5347\u6f0f\u6d1e\nGaruda Media SQL\u6ce8\u5165\u6f0f\u6d1e\nBelajarBro SQL\u6ce8\u5165\u6f0f\u6d1e\nCVE-2019-13529 SMA Solar Technology AG Sunny WebBox 1.6 CSRF\u6f0f\u6d1e\nCVE-2019-6971 TP-Link TL-WR1043ND 2 \u8eab\u4efd\u9a57\u8b49\u7e5e\u904e\u6f0f\u6d1e", "creation_timestamp": "2021-09-21T04:41:50.000000Z"}, {"uuid": "d161200e-bab8-4935-8b2c-175d8b664a25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-1622", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/cisco_dcnm_upload_2019.rb", "content": "{\"aliases\": [], \"arch\": \"java\", \"author\": [\"Pedro Ribeiro \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"DCNM exposes a file upload servlet (FileUploadServlet) at /fm/fileUpload.\\n          An authenticated user can abuse this servlet to upload a WAR to the Apache Tomcat webapps\\n          directory and achieve remote code execution as root.\\n          This module exploits two other vulnerabilities, CVE-2019-1619 for authentication bypass on\\n          versions 10.4(2) and below, and CVE-2019-1622 (information disclosure) to obtain the correct\\n          directory for the WAR file upload.\\n          This module was tested on the DCNM Linux virtual appliance 10.4(2), 11.0(1) and 11.1(1), and should\\n          work on a few versions below 10.4(2). Only version 11.0(1) requires authentication to exploit\\n          (see References to understand why).\", \"disclosure_date\": \"2019-06-26\", \"fullname\": \"exploit/multi/http/cisco_dcnm_upload_2019\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:57:58 +0000\", \"name\": \"Cisco Data Center Network Manager Unauthenticated Remote Code Execution\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/multi/http/cisco_dcnm_upload_2019.rb\", \"platform\": \"Java\", \"post_auth\": true, \"rank\": 600, \"ref_name\": \"multi/http/cisco_dcnm_upload_2019\", \"references\": [\"CVE-2019-1619\", \"CVE-2019-1620\", \"CVE-2019-1622\", \"URL-https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190626-dcnm-bypass\", \"URL-https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190626-dcnm-codex\", \"URL-https://raw.githubusercontent.com/pedrib/PoC/master/advisories/Cisco/cisco-dcnm-rce.txt\", \"URL-https://seclists.org/fulldisclosure/2019/Jul/7\"], \"rport\": 443, \"session_types\": false, \"targets\": [\"Automatic\", \"Cisco DCNM 11.1(1)\", \"Cisco DCNM 11.0(1)\", \"Cisco DCNM 10.4(2)\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:49:44.153829Z"}]}