Lucene search
GoogleOSV:CVE-2017-7402HistoryApr 03, 2017 - 5:59 p.m.
CVE-2017-7402
2017-04-0317:59:00
Google
osv.dev
3
Pixie 1.0.4 allows remote authenticated users to upload and execute arbitrary PHP code via the POST data in an admin/index.php?s=publish&x=filemanager request for a filename with a double extension, such as a .jpg.php file with Content-Type of image/jpeg.
Related
cve
cve
CVE-2017-7402
2017-04-03 17:59:00
zdt
zdt
Pixie 1.0.4 - Arbitrary File Upload Vulnerability
2017-04-04 00:00:00
exploitpack
exploitpack
Pixie 1.0.4 - Arbitrary File Upload
2017-04-02 00:00:00
exploitdb
exploitdb
Pixie 1.0.4 - Arbitrary File Upload
2017-04-02 00:00:00
cvelist
cvelist
CVE-2017-7402
2017-04-03 17:00:00
prion
prion
Design/Logic Flaw
2017-04-03 17:59:00
nvd
nvd
CVE-2017-7402
2017-04-03 17:59:00
packetstorm
packetstorm
Pixie 1.0.4 Shell Upload
2017-04-02 00:00:00