PT-2017-16555 · Genix · Genixcms

Published 2017-01-17 · Updated 2019-10-03 · CVE-2017-5520

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions GeniXCMS versions 0.0.0 through 0.0.8

Description The issue concerns the media rename feature, which fails to account for alternative PHP file extensions when checking uploaded files for PHP content. This allows users to rename and execute files with the .php6, .php7, and .phtml extensions.

Recommendations For GeniXCMS versions 0.0.0 through 0.0.8, consider restricting the upload and execution of files with alternative PHP extensions, such as .php6, .php7, and .phtml, until a proper fix is implemented. As a temporary workaround, disabling the media rename feature can help minimize the risk of exploitation.

Exploit

Fix

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

CVE-2017-5520

Affected Products

Genixcms

References · 4

• 🔥 https://github.com/semplon/GeniXCMS/issues/62 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2017-5520 · Security Note
• https://osv.dev/vulnerability/CVE-2017-5520 · Vendor Advisory
• http://securityfocus.com/bid/95460 · Note