CVE-2015-5457 PivotX before 2.3.11 does not validate the new file extension when renaming a file with multiple extensions, which allows remote attackers to execute arbitrary code by uploading a crafted file, as dem...
HighCVSS 7.5
EPSS 4.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
PivotX before 2.3.11 does not validate the new file extension when renaming a file with multiple extensions, which allows remote attackers to execute arbitrary code by uploading a crafted file, as demonstrated by a file named foo.php.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| pivotx | <= 2.3.10 | No fix listed |
References
- blog.pivotx.net
- packetstormsecurity.com exploit
- software-talk.org exploit
- sourceforge.net
- 20150627 Session Fixation, Reflected XSS, Code Execution in PivotX 2.3.10 mailing-list
- 75577 vdb-entry