CVE-2017-5520

2017-01-1709:22:00

mitre

www.cve.org

8.8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

48.9%

JSON

The media rename feature in GeniXCMS through 0.0.8 does not consider alternative PHP file extensions when checking uploaded files for PHP content, which enables a user to rename and execute files with the .php6, .php7 and .phtml extensions.

References

www.securityfocus.com/bid/95460

github.com/semplon/GeniXCMS/issues/62