CVE-2017-11347

Authenticated Code Execution Vulnerability in MetInfo 5.3.17 allows a remote authenticated attacker to generate a PHP script with the content of a malicious image, related to admin/include/common.inc.php and admin/app/physical/physical.php...

CVE-2017-11347

MetInfo 5.3.17 is affected by an Authenticated Code Execution vulnerability. An authenticated attacker can cause the system to write a PHP script that includes the content of an uploaded image by manipulating admin/include/common.inc.php and admin/app/physical/physical.php. The PoC shows an admin...