CVE-2017-14958 | BDVDB-2026-91090 Detail

Description#

lib.php in PivotX 2.3.11 does not properly block uploads of dangerous file types by admin users, which allows remote PHP code execution via an upload of a .php file.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://sourceforge.net/p/pivot-weblog/code/4490/

Exploit#

No public exploit known

History#

Version 12017-10-01Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.