CVE-2017-14764

CVE-2017-14764 affects GeniXCMS 1.1.4. The vulnerability allows remote authenticated users to execute arbitrary PHP code by placing a .php file inside a ZIP archive of a module uploaded via the Upload Modules page. The underlying issue is improper handling of module ZIP contents during extraction...