CVE-2018-19512: Ens Webgalamb

High severity, CVSS 7.2. EPSS: 7.2% chance of exploitation in the next 30 days.

In Webgalamb through 7.0, a system/ajax.php "wgmfile restore" directory traversal vulnerability could lead to arbitrary code execution by authenticated administrator users, because PHP files are restored under the document root directory.

Affected products

• Ens Webgalamb: up to and including 7.0

Published 2019-03-21. Last modified 2026-06-17.