Description
PivotX 2.3.11 allows remote authenticated Advanced users to execute arbitrary PHP code by performing an upload with a safe file extension (such as .jpg) and then invoking the duplicate function to change to the .php extension.
Unscored
CVE-2017-7570
EUVD-2017-16575GHSA-93mh-w34w-h4w2
PivotX 2.3.11 allows remote authenticated Advanced users to execute arbitrary PHP code by performing an upload with a safe file extension (…
Published Apr 7, 2017 · Updated Aug 5, 2024 · Assigned by mitre