CVE-2019-15130

CVE-2019-15130 is a critical vulnerability affecting the Recruitment module in Humanica Humatrix 7 versions 1.0.0.203 and 1.0.0.681. It allows an unauthenticated attacker to upload arbitrary file types, including executable content like ASP or ASPX files, to a candidate's profile picture folder. This can lead to remote code execution and full compromise of the server. The vulnerability has a CVSS score of 9.8 (Critical) due to its network-based attack vector, low attack complexity, and high impact on confidentiality, integrity, and availability. While there is no evidence of active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community discussion, indicating awareness and potential for future exploitation.