CVE-2017-14958

lib.php in PivotX 2.3.11 does not properly block uploads of dangerous file types by admin users, which allows remote PHP code execution via an upload of a .php file...

CVE-2017-14958

PivotX 2.3.11 lib.php fails to block dangerous file types uploaded by admin users, enabling remote PHP code execution via uploading a PHP file. This is documented across multiple sources (NVD/CNVD/OSV) with consistent description of the vulnerability in PivotX. The root cause is improper validati...

CVE-2017-14958

lib.php in PivotX 2.3.11 does not properly block uploads of dangerous file types by admin users, which allows remote PHP code execution via an upload of a .php file...