CVE-2017-14763
In the Install Themes page in GeniXCMS 1.1.4, remote authenticated users can execute arbitrary PHP code via a .php file in a ZIP archive of a theme.
- Score
- CVSS 3.0 8.8 High
- Status
- Modified - cve@mitre.org
- Published
- 2017-09-27
- Last modified
- 2024-08-05
Affected products
References
- http://ph0rse.me/2017/09/21/GeniXCMS-1-1-4%E6%9C%80%E6%96%B0%E7%89%88%E6%9C%AC-getshell/
