high8.8Public exploit code
CVE-2017-14839
TeamWork Photo Fusion allows Arbitrary File Upload in changeAvatar and changeCover.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Photo Fusion - Arbitrary File Upload2017-09-26 · webapps · php
Impact
TeamWork Photo Fusion allows Arbitrary File Upload in changeAvatar and changeCover.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Teamworktec | Photo Fusion | All versions |