CVE-2017-7402

概要

参考情報

• rungga.blogspot.co.id/2017/04/remote-file-upload-vulnerability-in.html · Exploit
• exploit-db.com/exploits/41784

pixie のその他の脆弱性

• CVE-2017-7363中 6.1Pixie 1.0.4 allows an admin/index.php s=publish&m=module&x= XSS attack.
• CVE-2017-7362中 6.1Pixie 1.0.4 allows an admin/index.php s=publish&m=dynamic&x= XSS attack.
• CVE-2017-7361中 6.1Pixie 1.0.4 allows an admin/index.php s=publish&m=static&x= XSS attack.
• CVE-2017-7360中 6.1Pixie 1.0.4 allows an admin/index.php s=settings&x= XSS attack.
• CVE-2017-7359中 6.1Pixie 1.0.4 allows an admin/index.php s=login&m= XSS attack.