CVE-2019-19020

An issue was discovered in TitanHQ WebTitan before 5.18. In the administration web interface it is possible to upload a crafted backup file that enables an attacker to execute arbitrary code by overwriting existing files or adding new PHP files under the web root. This requires the attacker to have access to a valid web interface account.

• CWE-434

• https://write-up.github.io/webtitan/Exploit, Third Party Advisory
• https://www.webtitan.com/resources/product-updates/Release Notes, Vendor Advisory
• https://write-up.github.io/webtitan/Exploit, Third Party Advisory
• https://www.webtitan.com/resources/product-updates/Release Notes, Vendor Advisory

Published

Dec 2, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-19014An issue was discovered in TitanHQ WebTitan before 5.18. It …7.8
• CVE-2019-19015An issue was discovered in TitanHQ WebTitan before 5.18. The…9.8
• CVE-2019-19016An issue was discovered in TitanHQ WebTitan before 5.18. Som…7.5
• CVE-2019-19017An issue was discovered in TitanHQ WebTitan before 5.18. The…8.1
• CVE-2019-19018An issue was discovered in TitanHQ WebTitan before 5.18. It …2.7
• CVE-2019-19019An issue was discovered in TitanHQ WebTitan before 5.18. It …7.5
• CVE-2019-19021An issue was discovered in TitanHQ WebTitan before 5.18. It …9.8
• CVE-2019-19022iTerm2 through 3.3.6 has potentially insufficient documentat…7.5
• CVE-2019-19023Cloud Native Computing Foundation Harbor prior to 1.8.6 and …8.8
• CVE-2019-19025Cloud Native Computing Foundation Harbor prior to 1.8.6 and …8.8
• CVE-2019-19026Cloud Native Computing Foundation Harbor prior to 1.8.6 and …4.9
• CVE-2019-19029Cloud Native Computing Foundation Harbor prior to 1.8.6 and …7.2