CVE-2017-9602

Published: 2017-06-16T13:29Z

Last Modified: 2024-11-21T03:36Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

KBVault Mysql Free Knowledge Base application package 0.16a comes with a FileExplorer/Explorer.aspx?id=/Uploads file-management component. An unauthenticated user can access the file upload and deletion functionality. Through this functionality, a user can upload an ASPX script to Uploads/Documents/ to run any arbitrary code. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt