Files
CVEs-PoC/2017/CVE-2017-5520.md
2025-09-29 21:09:30 +02:00

723 B

CVE-2017-5520

Description

The media rename feature in GeniXCMS through 0.0.8 does not consider alternative PHP file extensions when checking uploaded files for PHP content, which enables a user to rename and execute files with the .php6, .php7 and .phtml extensions.

POC

Reference

Github

No PoCs found on GitHub currently.