CVE-2017-14764

HIGH

GeniXCMS 1.1.4 - Authenticated PHP Code Execution via Module Upload

Title source: llm
STIX 2.1

Description

In the Upload Modules page in GeniXCMS 1.1.4, remote authenticated users can execute arbitrary PHP code via a .php file in a ZIP archive of a module.

References (1)

Core 1
Core References

Scores

CVSS v3 8.8
EPSS 0.0154
EPSS Percentile 71.7%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-94
Status published
Products (2)
genix/cms Packagist
genixcms/genixcms 1.1.4
Published Sep 27, 2017
Tracked Since Feb 18, 2026