CVE-2017-9069

Published May 18th, 2017

View on NVD ↗

CVSS v3

N/A

CVSS v2

6.5

MEDIUM

Affected

1

PROJECT

Description

In MODX Revolution before 2.5.7, a user with file upload permissions is able to execute arbitrary code by uploading a file with the name .htaccess.

modxcms/revolution

MODX Revolution - Content Management Framework

GitHub

1.4K