CVE-2017-11760

2022-10-0316:23:02

mitre

www.cve.org

cve-2017-11760

projeqtor

image upload

8.8 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

61.5%

JSON

uploadImage.php in ProjeQtOr before 6.3.2 allows remote authenticated users to execute arbitrary PHP code by uploading a .php file composed of concatenated image data and script data, as demonstrated by uploading as an image within the description text area.