CVE-2019-8404

MEDIUM 6.5CVE-2019-8404 · Published 14/05/2019 · updated 17/06/2026

In short

CVE-2019-8404 is a MEDIUM (CVSS 6.5) vulnerability affecting webiness inventory (webiness inventory project).
Chance of exploitation in the next 30 days (EPSS): 7.9%, higher than 94.7% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
webiness inventory webiness_inventory_project	`= 2.3`	No fix yet

Description

An issue was discovered in Webiness Inventory 2.3. The ProductModel component allows Arbitrary File Upload via a crafted product image during the creation of a new product. Consequently, an attacker can steal information from the site with the help of an installed executable file, or change the contents of pages.

References

packetstormsecurity.com/files/151763/Webiness-Inventory-2.3-Arbitrary-File-Upload.html · Exploit
sourceforge.net/projects/webinessinventory/files · Product
exploit-db.com/exploits/46405 · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free