critical9.8Public exploit code
CVE-2017-17976
In Utilities.php in Perfex CRM 1.9.7, Unrestricted file upload can lead to remote code execution.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- PerfexCRM 1.9.7 - Arbitrary File Upload2018-01-15 · webapps · php
Impact
In Utilities.php in Perfex CRM 1.9.7, Unrestricted file upload can lead to remote code execution.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Perfexcrm | Perfex Crm | Version 1.9.7 |