CVE-2019-9563

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

In BlueMind 3.5.x before 3.5.11 Hotfix 7 and 4.x before 4.0-beta3, the contact application mishandles temporary uploads.

Metrics

CVSS 3.0 7.5/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-19

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://git.bluemind.net/bluemind/commit/b11aa12d3c2f4c5dac4f9059f8b6bac1bf873244Patch, Vendor Advisory
https://forum.bluemind.net/viewtopic.php?pid=8049#p8049Issue Tracking, Vendor Advisory
https://forum.bluemind.net/viewtopic.php?pid=8054#p8054Issue Tracking, Vendor Advisory
http://git.bluemind.net/bluemind/commit/b11aa12d3c2f4c5dac4f9059f8b6bac1bf873244Patch, Vendor Advisory
https://forum.bluemind.net/viewtopic.php?pid=8049#p8049Issue Tracking, Vendor Advisory
https://forum.bluemind.net/viewtopic.php?pid=8054#p8054Issue Tracking, Vendor Advisory

Timeline

Published: Mar 4, 2019
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2019

CVE-2019-95649.8A vulnerability in the authentication logic of Wyze Cam Pan v2, Cam v2, Cam v3 allows an attacker to bypass login and control the devices. T CVE-2019-95659.1Druide Antidote RX, HD, 8 before 8.05.2287, 9 before 9.5.3937 and 10 before 10.1.2147 allows remote attackers to steal NTLM hashes or perfor CVE-2019-95669.8FlarumChina v0.1.0-beta.7C has SQL injection via a /?q= request.CVE-2019-95676.1The "Forminator Contact Form, Poll & Quiz Builder" plugin before 1.6 for WordPress has XSS via a custom input field of a poll.CVE-2019-95686.5The "Forminator Contact Form, Poll & Quiz Builder" plugin before 1.6 for WordPress has SQL Injection via the wp-admin/admin.php?page=formina CVE-2019-95699.8Buffer Overflow in dactetra in Delta Controls enteliBUS Manager V3.40_B-571848 allows remote unauthenticated users to execute arbitrary code CVE-2019-95704.8An issue was discovered in YzmCMS 5.2.0. It has XSS via the bottom text field to the admin/system_manage/save.html URI, related to the site_CVE-2019-95727.2SchoolCMS version 2.3.1 allows file upload via the theme upload feature at admin.php?m=admin&c=theme&a=upload by using the .zip extension al CVE-2019-95737.5The WP Human Resource Management plugin before 2.2.6 for WordPress mishandles leave applications.CVE-2019-95747.5The WP Human Resource Management plugin before 2.2.6 for WordPress does not ensure that a leave modification occurs in the context of the Ad CVE-2019-95756.1The Quiz And Survey Master plugin 6.0.4 for WordPress allows wp-admin/admin.php?page=mlw_quiz_results quiz_id XSS.CVE-2019-95766.1The Blog2Social plugin before 5.0.3 for WordPress allows wp-admin/admin.php?page=blog2social-ship XSS.