NetSight
high8.8Public exploit code

CVE-2017-14840

TeamWork TicketPlus allows Arbitrary File Upload in updateProfile.

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

TeamWork TicketPlus allows Arbitrary File Upload in updateProfile.

Affected products

VendorProductAffected versions
TeamworktecTicketplus
All versions

Weakness classification

References