CVE-2019-16885

In OkayCMS through 2.3.4, an unauthenticated attacker can achieve remote code execution by injecting a malicious PHP object via a crafted cookie. This could happen at two places: first in view/ProductsView.php using the cookie price_filter, and second in api/Comparison.php via the cookie comparison.

• CWE-94

• http://packetstormsecurity.com/files/155583/OkayCMS-2.3.4-Remote-Code-Execution.htmlExploit, Third Party Advisory
• http://seclists.org/fulldisclosure/2019/Dec/15Exploit, Third Party Advisory
• https://www.ait.ac.at/ait-sa-20191129-01-unauthenticated-remote-code-execution-okaycmsExploit, Third Party Advisory
• http://packetstormsecurity.com/files/155583/OkayCMS-2.3.4-Remote-Code-Execution.htmlExploit, Third Party Advisory
• http://seclists.org/fulldisclosure/2019/Dec/15Exploit, Third Party Advisory
• https://www.ait.ac.at/ait-sa-20191129-01-unauthenticated-remote-code-execution-okaycmsExploit, Third Party Advisory

Published

Dec 3, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-16879The Synergy Systems & Solutions (SSS) HUSKY RTU 6049-E70, wi…9.8
• CVE-2019-1688A vulnerability in the management web interface of Cisco Net…7.1
• CVE-2019-16880An issue was discovered in the linea crate through 0.9.4 for…9.8
• CVE-2019-16881An issue was discovered in the portaudio-rs crate through 0.…9.8
• CVE-2019-16882An issue was discovered in the string-interner crate before …7.5
• CVE-2019-16884runc through 1.0.0-rc8, as used in Docker through 19.03.2-ce…7.5
• CVE-2019-16887In IrfanView 4.53, Data from a Faulting Address controls a s…7.8
• CVE-2019-16889Ubiquiti EdgeMAX devices before 2.0.3 allow remote attackers…7.5
• CVE-2019-1689A vulnerability in the client application for iOS of Cisco W…7.3
• CVE-2019-16890Halo 1.1.0 has XSS via a crafted authorUrl in JSON data to a…5.4
• CVE-2019-16891Liferay Portal CE 6.2.5 allows remote command execution beca…9.8
• CVE-2019-16892In Rubyzip before 1.3.0, a crafted ZIP file can bypass appli…5.5