CVE-2019-15746: Sitos Six

Critical severity, CVSS 9.8. EPSS: 1.9% chance of exploitation in the next 30 days.

SITOS six Build v6.2.1 allows an attacker to inject arbitrary PHP commands. As a result, an attacker can compromise the running server and execute system commands in the context of the web user.

Affected products

• Sitos Sitos Six: version 6.2.1 only

Published 2019-10-07. Last modified 2026-06-17.