PivotX 2.3.11 allows remote authenticated Advanced users to execute arbitrary PHP code by performing an upload with a safe file extension (such as .jpg) and then invoking the duplicate function to change to the .php extension.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2017-04-07T04:33:00
Updated: 2024-08-05T16:04:12.041Z
Reserved: 2017-04-06T00:00:00
Link: CVE-2017-7570
Vulnrichment
No data.
NVD
Status : Modified
Published: 2017-04-07T04:59:00.160
Modified: 2024-11-21T03:32:11.310
Link: CVE-2017-7570
Redhat
No data.