CVE-2019-15952

An issue was discovered in Total.js CMS 12.0.0. An authenticated user with the Pages privilege can conduct a path traversal attack (../) to include .html files that are outside the permitted directory. Also, if a page contains a template directive, then the directive will be server side processed. Thus, if a user can control the content of a .html file, then they can inject a payload with a malicious template directive to gain Remote Command Execution. The exploit will work only with the .html extension.

• CWE-22

• http://packetstormsecurity.com/files/154340/Totaljs-CMS-12.0-Path-Traversal.html
• http://seclists.org/fulldisclosure/2019/Sep/11
• https://github.com/beerpwn/CVE/blob/master/Totaljs_disclosure_report/report_final.pdfExploit, Third Party Advisory
• https://seclists.org/fulldisclosure/2019/Sep/2Exploit, Mailing List, Third Party Advisory
• http://packetstormsecurity.com/files/154340/Totaljs-CMS-12.0-Path-Traversal.html
• http://seclists.org/fulldisclosure/2019/Sep/11
• https://github.com/beerpwn/CVE/blob/master/Totaljs_disclosure_report/report_final.pdfExploit, Third Party Advisory
• https://seclists.org/fulldisclosure/2019/Sep/2Exploit, Mailing List, Third Party Advisory

Published

Sep 5, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-15946OpenSC before 0.20.0-rc1 has an out-of-bounds access of an A…6.4
• CVE-2019-15947In Bitcoin Core 0.18.0, bitcoin-qt stores wallet.dat data un…7.5
• CVE-2019-15948Texas Instruments CC256x and WL18xx dual-mode Bluetooth cont…8.8
• CVE-2019-15949Nagios XI before 5.6.6 allows remote command execution as ro…8.8
• CVE-2019-1595A vulnerability in the Fibre Channel over Ethernet (FCoE) pr…7.4
• CVE-2019-15950The CRM Plugin before 4.2.4 for Redmine allows XSS via craft…6.1
• CVE-2019-15953An issue was discovered in Total.js CMS 12.0.0. An authentic…
• CVE-2019-15954An issue was discovered in Total.js CMS 12.0.0. An authentic…9.9
• CVE-2019-15955An issue was discovered in Total.js CMS 12.0.0. A low privil…
• CVE-2019-15956A vulnerability in the web management interface of Cisco Asy…8.8
• CVE-2019-15957A vulnerability in the web-based management interface of cer…7.2
• CVE-2019-15958A vulnerability in the REST API of Cisco Prime Infrastructur…9.8