high8.8Public exploit code
CVE-2017-17874
Vanguard Marketplace Digital Products PHP 1.4 allows arbitrary file upload via an "Add a new product" or "Add a product preview" action, which can make a .php …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Vanguard 1.4 - Arbitrary File Upload2017-12-11 · webapps · php
Impact
Vanguard Marketplace Digital Products PHP 1.4 allows arbitrary file upload via an "Add a new product" or "Add a product preview" action, which can make a .php file accessible under a uploads/ URI.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Vanguard Project | Marketplace Digital Products Php | Version 1.4.0 |