Information disclosure

2017-01-1709:59:00

PRIOn knowledge base

www.prio-n.com

8.7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

48.9%

JSON

The media rename feature in GeniXCMS through 0.0.8 does not consider alternative PHP file extensions when checking uploaded files for PHP content, which enables a user to rename and execute files with the .php6, .php7 and .phtml extensions.

CPENameOperatorVersion
genixcmsle0.0.8

CPE	Name	Operator	Version
	genixcms	le	0.0.8

References

www.securityfocus.com/bid/95460

github.com/semplon/GeniXCMS/issues/62