CVE-2017-7447

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

• HelpDEZK 1.1.1 - Cross-Site Request Forgery / Code Execution2017-04-05 · webapps · php

Impact

HelpDEZk 1.1.1 has CSRF in admin/home#/logos/ with an impact of remote execution of arbitrary PHP code.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• http://rungga.blogspot.co.id/2017/04/multiple-csrf-remote-code-execution.html
• http://www.securityfocus.com/bid/97485
• https://github.com/albandes/helpdezk/issues/2
• https://www.exploit-db.com/exploits/41824/
• http://rungga.blogspot.co.id/2017/04/multiple-csrf-remote-code-execution.html
• http://www.securityfocus.com/bid/97485
• https://github.com/albandes/helpdezk/issues/2
• https://www.exploit-db.com/exploits/41824/