CVE-2017-14764

2017-09-2708:29:00

Google

osv.dev

7.4 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

73.0%

JSON

In the Upload Modules page in GeniXCMS 1.1.4, remote authenticated users can execute arbitrary PHP code via a .php file in a ZIP archive of a module.

CPENameOperatorVersion
genixcmseq0.0.7-alpha.1
genixcmseq1.1.3
genixcmseq0.0.6
genixcmseq0.0.2
genixcmseq1.0.2
genixcmseq0.0.8
genixcmseq1.1.1
genixcmseq1.1.0
genixcmseq1.1.2
genixcmseq0.0.5

Name	Operator	Version
genixcms	eq	0.0.7-alpha.1
genixcms	eq	1.1.3
genixcms	eq	0.0.6
genixcms	eq	0.0.2
genixcms	eq	1.0.2
genixcms	eq	0.0.8
genixcms	eq	1.1.1
genixcms	eq	1.1.0
genixcms	eq	1.1.2
genixcms	eq	0.0.5