high8.8Public exploit code
CVE-2017-12929
Arbitrary File Upload in resource.php of TecnoVISION DLX Spot Player4 version >1.5.10 allows remote authenticated users to upload arbitrary files leading to Re…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Tecnovision DLX Spot - Arbitrary File Upload2017-05-19 · webapps · php
- Tecnovision DLX Spot - SSH Backdoor Access2017-05-19 · remote · multiple
Impact
Arbitrary File Upload in resource.php of TecnoVISION DLX Spot Player4 version >1.5.10 allows remote authenticated users to upload arbitrary files leading to Remote Command Execution.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Tecnovision | Dlx Spot Player4 | All versions |