NVD

Id
84863  
Name
CVE-2017-7570  
Description
PivotX 2.3.11 allows remote authenticated Advanced users to execute arbitrary PHP code by performing an upload with a safe file extension (such as .jpg) and then invoking the duplicate function to change to the .php extension.  
Reject
 
CVSS Version
2  
CVSS Score
6.5  
Severity
Medium  
CVSS Base Score
6.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:P/I:P/A:P)  
Pub Date
2017-04-27  
Published
2017-04-07  
Modified Date
2017-04-13  
Seq
2017-7570  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
414281 84863 CVE-2017-6359 97059  View
414282 84863 CVE-2017-6359 97072  View
414283 84863 CVE-2017-6359 1038091  View
414284 84863 CVE-2017-6359 https://www.qnap.com/en-us/releasenotes/  View
414285 84863 CVE-2017-6359 https://www.qnap.com/en/support/con_show.php?cid=113  View
414286 84863 CVE-2017-6359 97059  View
414287 84863 CVE-2017-6359 97072  View
414288 84863 CVE-2017-6359 1038091  View
414289 84863 CVE-2017-6359 https://www.qnap.com/en-us/releasenotes/  View
414290 84863 CVE-2017-6359 https://www.qnap.com/en/support/con_show.php?cid=113  View
414291 84863 CVE-2017-6359 97059  View
414292 84863 CVE-2017-6359 97072  View
414293 84863 CVE-2017-6359 1038091  View
414294 84863 CVE-2017-6359 https://www.qnap.com/en-us/releasenotes/  View
414295 84863 CVE-2017-6359 https://www.qnap.com/en/support/con_show.php?cid=113  View
417700 84863 CVE-2017-3035 97550  View
417701 84863 CVE-2017-3035 http://www.zerodayinitiative.com/advisories/ZDI-17-261/  View
417702 84863 CVE-2017-3035 https://helpx.adobe.com/security/products/acrobat/apsb17-11.html  View
417703 84863 CVE-2017-3035 97550  View
417704 84863 CVE-2017-3035 http://www.zerodayinitiative.com/advisories/ZDI-17-261/  View
417705 84863 CVE-2017-3035 https://helpx.adobe.com/security/products/acrobat/apsb17-11.html  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
66733 JVNDB-2017-003058 PivotX における任意の PHP コードを実行される脆弱性 PivotX には、任意の PHP コードを実行される脆弱性が存在します。 CVE-2017-7570 0 CVE-2017-7570 84863 6.5 8.8 http://jvndb.jvn.jp/ja/contents/2017/JVNDB-2017-003058.html 2017-04-07 2017-05-12 View