CVE-2016-5661

Severity: high (CVSS 8.8 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2016-07-15 · updated 2026-06-17
Weakness: CWE-284

Description

Accela Civic Platform Citizen Access portal relies on the client to restrict file types for uploads, which allows remote authenticated users to execute arbitrary code via modified _EventArgument and filename parameters.

Affected products

Accela Civic Platform Citizen Access Portal: all versions

References

http://www.kb.cert.org/vuls/id/665280
http://www.kb.cert.org/vuls/id/JLAD-ABMPVA
http://www.securityfocus.com/bid/91765
http://www.kb.cert.org/vuls/id/665280
http://www.kb.cert.org/vuls/id/JLAD-ABMPVA
http://www.securityfocus.com/bid/91765

Get alerted when CVE-2016-5661 or the next vulnerability affects your stack