164 matches found
CVE-2017-17976
In Utilities.php in Perfex CRM 1.9.7, Unrestricted file upload can lead to remote code execution...
9.8CVSS9.8AI score0.12506EPSS
SaveExploits5References2
Unrestricted file upload
In Utilities.php in Perfex CRM 1.9.7, Unrestricted file upload can lead to remote code execution...
7.5CVSS9.7AI score0.12506EPSS
SaveExploits5References2Affected Software1
CVE-2017-17976
CVE-2017-17976 affects Perfex CRM 1.9.7 and stems from an unrestricted file upload in the utilities.php workflow, enabling remote code execution. Public sources confirm an arbitrary file upload path via the elfinder feature (elfinder_init) and mkfile, demonstrated by reports referencing shell.php...
9.8CVSS9.8AI score0.12506EPSS
SaveExploits5References2Affected Software1
20