CVE-2017-7570

Published: 2017-04-07T04:59Z

Last Modified: 2024-11-21T03:32Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

PivotX 2.3.11 allows remote authenticated Advanced users to execute arbitrary PHP code by performing an upload with a safe file extension (such as .jpg) and then invoking the duplicate function to change to the .php extension. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt