CVE-2017-5520

The media rename feature in GeniXCMS through 0.0.8 does not consider alternative PHP file extensions when checking uploaded files for PHP content, which…

published January 17, 2017

CVSS
—
EPSS
2%
Percentile
78.3
In the wild
Unconfirmed
What it is

The media rename feature in GeniXCMS through 0.0.8 does not consider alternative PHP file extensions when checking uploaded files for PHP content, which enables a user to rename and execute files with the `.php6`, `.php7` and `.phtml` extensions.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01806 · 78.3th percentile
Published
2017-01-17T09:22Z
EPSS history
Timeline
  • 17 JAN 09:22Z
    The media rename feature in GeniXCMS through 0.0.8 does not consider alternative PHP file extensions when checking uploaded files for PHP content, which…
    cvelistv5