What’s Vulnerable › Vulnerabilities

CVE-2017-7570

• Severity: high (CVSS 8.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.5% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2017-04-07 · updated 2026-06-17
• Weakness: CWE-94

Description

PivotX 2.3.11 allows remote authenticated Advanced users to execute arbitrary PHP code by performing an upload with a safe file extension (such as .jpg) and then invoking the duplicate function to change to the .php extension.

Affected products

• Pivotx: 2.3.11

References

• https://gist.github.com/X1nda/749b6aac6e080624d9f8ec81321335df
• https://gist.github.com/X1nda/749b6aac6e080624d9f8ec81321335df

Get alerted when CVE-2017-7570 or the next vulnerability affects your stack