CVE-2019-16305

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

In MobaXterm 11.1 and 12.1, the protocol handler is vulnerable to command injection. A crafted link can trigger a popup asking whether the user wants to run MobaXterm to handle the link. If accepted, another popup appears asking for further confirmation. If this is also accepted, command execution is achieved, as demonstrated by the MobaXterm://`calc` URI.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-77

Affected software

No affected versions have been published.

Timeline

Published: Sep 14, 2019
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2019

CVE-2019-163076.1A Reflected Cross-Site Scripting (XSS) vulnerability in the webEx module in webExMeetingLogin.jsp and deleteWebExMeetingCheck.jsp in Fuji Xe CVE-2019-163099.8FlameCMS 3.3.5 has SQL injection in account/login.php via accountName.CVE-2019-16315.3A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) could allow an unauthenticated, remote CVE-2019-163105.4NIUSHOP V1.11 has XSS via the index.php?s=/admin URI.CVE-2019-163118.8NIUSHOP V1.11 has CSRF via search_info to index.php.CVE-2019-163126.1s-cms V3.0 has XSS in index.php?type=text via the S_id parameter.CVE-2019-163137.5ifw8 Router ROM v4.31 allows credential disclosure by reading the action/usermanager.htm HTML source code.CVE-2019-163149.8Indexhibit 2.1.5 allows a product reinstallation, with resultant remote code execution, via /ndxzstudio/install.php?p=2.CVE-2019-163178.8In Pimcore before 5.7.1, an attacker with limited privileges can trigger execution of a .phar file via a phar:// URL in a filename parameter CVE-2019-163188.8In Pimcore before 5.7.1, an attacker with limited privileges can bypass file-extension restrictions via a 256-character filename, as demonst CVE-2019-163197.5In Wireshark 3.0.0 to 3.0.3 and 2.6.0 to 2.6.10, the Gryphon dissector could go into an infinite loop. This was addressed in plugins/epan/gr CVE-2019-16328.0A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) could allow an authenticated, remote a