CVE-2017-9741

2017-06-1821:29:00

Google

osv.dev

7.9 High

AI Score

Confidence

High

0.008 Low

EPSS

Percentile

82.3%

JSON

install/make-config.php in ProjectSend r754 allows remote attackers to execute arbitrary PHP code via the dbprefix parameter, related to replacing TABLES_PREFIX in the configuration file.

CPENameOperatorVersion
projectsendeqr559
projectsendeqr753
projectsendeqr754

Name	Operator	Version
projectsend	eq	r559
projectsend	eq	r753
projectsend	eq	r754

References

github.com/XiaoZhis/ProjectSend/issues/1