CVE-2020-13619: OS Command Injection in Locutus – CVSS 9.8 · Watchpost

← All vulnerabilities

OS Command Injection in Locutus

严重 9.8CVE-2020-13619 · GHSA-h86x-mv66-gr5q · Published 01/07/2020 · updated 17/06/2026

要点

CVE-2020-13619 是影响 locutus php (locutus), locutus 的严重 (CVSS 9.8)漏洞。
未来 30 天内被利用的概率（EPSS）：2.9%，高于 87.1% 的漏洞。
暂无已修复版本：请关注参考资料中的厂商公告。

Package	Affected versions	Patched versions
locutus php locutus	`≤ 2.0.11`	No fix yet
locutus npm	`≤ 2.0.11`	No fix yet

Description

php/exec/escapeshellarg in Locutus PHP through 2.0.11 allows an attacker to achieve code execution.

NVD description

php/exec/escapeshellarg in Locutus PHP through 2.0.11 allows an attacker to achieve code execution.

References

nvd.nist.gov/vuln/detail/CVE-2020-13619 · ADVISORY
locutus.io/php · WEB
web.archive.org/web/20230521185837/https://reallinkers.github.io/CVE-2020-13619 · WEB
npmjs.com/package/locutus · WEB
locutus.io/php · Product
reallinkers.github.io/CVE-2020-13619 · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free