CVE-2017-14704

Multiple unrestricted file upload vulnerabilities in the (1) imageSubmit and (2) proof_submit functions in Claydip Laravel Airbnb Clone 1.0 allow remote…

published September 26, 2017

CVSS
—
EPSS
8%
Percentile
95.0
In the wild
Unconfirmed
What it is

Multiple unrestricted file upload vulnerabilities in the (1) imageSubmit and (2) proof_submit functions in Claydip Laravel Airbnb Clone 1.0 allow remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in images/profile.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.08480 · 95.0th percentile
Published
2017-09-26T14:00Z
EPSS history
Timeline
  • 26 SEP 14:00Z
    Multiple unrestricted file upload vulnerabilities in the (1) imageSubmit and (2) proof_submit functions in Claydip Laravel Airbnb Clone 1.0 allow remote…
    cvelistv5