CVE-2019-19208 (CRITICAL 9.8) · Watchpost

← All vulnerabilities

Code injection in codiad

CRITICAL 9.8CVE-2019-19208 · GHSA-v92m-hhhw-vv9v · Published 16/03/2020 · updated 17/06/2026

Package	Affected versions	Patched versions
codiad/codiad Packagist	`≤ 2.8.4`	No fix yet
codiad codiad	`≤ 2.8.4`	No fix yet

Description

Codiad Web IDE through 2.8.4 allows PHP Code injection.

NVD description

Codiad Web IDE through 2.8.4 allows PHP Code injection.

References

nvd.nist.gov/vuln/detail/CVE-2019-19208 · ADVISORY
Codiad/Codiad · PACKAGE
Codiad/Codiad · WEB
Hacker5preme/Exploits · WEB
herolab.usd.de/en/security-advisories · WEB
herolab.usd.de/security-advisories/usd-2019-0049 · WEB
exploit-db.com/exploits/49902 · WEB
packetstormsecurity.com/files/162753/Codiad-2.8.4-Remote-Code-Execution.html · WEB
herolab.usd.de/en/security-advisories · Third Party Advisory
herolab.usd.de/security-advisories/usd-2019-0049 · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free