Back to Database
Status published
High
CVE-2019-25480
ARMBot Unrestricted File Upload via upload.php
Vulnerability Description
ARMBot contains an unrestricted file upload vulnerability in upload.php that allows unauthenticated attackers to upload arbitrary files by manipulating the file parameter with path traversal sequences. Attackers can upload PHP files with traversal payloads ../public_html/ to write executable code to the web root and achieve remote code execution.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-25480
Credits & Attribution
No credits recorded in the NVD database.
Affected Vendor
ARMBot
View all reports →Affected Software
ARMBot
Vulnerable Versions:
*
Timeline
Official Publish:
March 11th, 2026
Last Modified:
April 7th, 2026
Added to House:
July 20th, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N