CVE-2017-14958

lib.php in PivotX 2.3.11 does not properly block uploads of dangerous file types by admin users, which allows remote PHP code execution via an upload of a .php…

published October 1, 2017

CVSS
—
EPSS
1%
Percentile
70.7
In the wild
Unconfirmed
What it is

lib.php in PivotX 2.3.11 does not properly block uploads of dangerous file types by admin users, which allows remote PHP code execution via an upload of a .php file.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01331 · 70.7th percentile
Published
2017-10-01T15:00Z
EPSS history
Timeline
  • 01 OCT 15:00Z
    lib.php in PivotX 2.3.11 does not properly block uploads of dangerous file types by admin users, which allows remote PHP code execution via an upload of a .php…
    cvelistv5