Perfex CRM Arbitrary File Upload Vulnerability

Perfex CRM is a customer relationship management software. The software features payment management, project management, task assignment and goal tracking. An arbitrary file upload vulnerability exists in the Utilities.php file in Perfex CRM version 1.9.7. A remote attacker can exploit this...

CVE-2017-17976

In Utilities.php in Perfex CRM 1.9.7, Unrestricted file upload can lead to remote code execution...

CVE-2017-17976

In Utilities.php in Perfex CRM 1.9.7, Unrestricted file upload can lead to remote code execution...

Unrestricted file upload

In Utilities.php in Perfex CRM 1.9.7, Unrestricted file upload can lead to remote code execution...

CVE-2017-17976

In Utilities.php in Perfex CRM 1.9.7, Unrestricted file upload can lead to remote code execution...

CVE-2017-17976

CVE-2017-17976 affects Perfex CRM 1.9.7 and stems from an unrestricted file upload in the utilities.php workflow, enabling remote code execution. Public sources confirm an arbitrary file upload path via the elfinder feature (elfinder_init) and mkfile, demonstrated by reports referencing shell.php...