Skip to content
OpenAdvisories
Unscored CVE-2017-5520 EUVD-2017-14624GHSA-7vj3-pg62-q488

The media rename feature in GeniXCMS through 0.0.8 does not consider alternative PHP file extensions when checking uploaded files for PHP c…

Published Jan 17, 2017 · Updated Aug 5, 2024 · Assigned by mitre

Description

The media rename feature in GeniXCMS through 0.0.8 does not consider alternative PHP file extensions when checking uploaded files for PHP content, which enables a user to rename and execute files with the `.php6`, `.php7` and `.phtml` extensions.

References