CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

164 matches found

NVD•added 2018/01/26 8:29 p.m.•29 views

CVE-2017-17976

In Utilities.php in Perfex CRM 1.9.7, Unrestricted file upload can lead to remote code execution...

9.8CVSS9.8AI score0.12506EPSS

Exploits5References2

Prion•added 2018/01/26 8:29 p.m.•23 views

Unrestricted file upload

In Utilities.php in Perfex CRM 1.9.7, Unrestricted file upload can lead to remote code execution...

7.5CVSS9.7AI score0.12506EPSS

Exploits5References2Affected Software1

CVE•added 2018/01/26 8:0 p.m.•66 views

CVE-2017-17976

CVE-2017-17976 affects Perfex CRM 1.9.7 and stems from an unrestricted file upload in the utilities.php workflow, enabling remote code execution. Public sources confirm an arbitrary file upload path via the elfinder feature (elfinder_init) and mkfile, demonstrated by reports referencing shell.php...

9.8CVSS9.8AI score0.12506EPSS

Exploits5References2Affected Software1