high8.8Public exploit code
CVE-2017-14840
TeamWork TicketPlus allows Arbitrary File Upload in updateProfile.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- TicketPlus - Arbitrary File Upload2017-09-26 · webapps · php
Impact
TeamWork TicketPlus allows Arbitrary File Upload in updateProfile.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Teamworktec | Ticketplus | All versions |