CVE-2019-15766

CVE-2019-15766 is a high-severity remote code execution vulnerability affecting KSLABS KSWEB application version 3.93 for Android. An authenticated attacker can exploit this by sending a crafted POST request to the AJAX handler, writing arbitrary files, including PHP files, to the public web directory on the Android device. This allows for subsequent execution of the malicious PHP code, leading to complete compromise of confidentiality, integrity, and availability. While the CVSS score is 8.8 (High), there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.