Securimage

1 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2017-14077 PHP MEDIUM POC PATCH This Month

HTML Injection in Securimage 3.6.4 and earlier allows remote attackers to inject arbitrary HTML into an e-mail message body via the $_SERVER['HTTP_USER_AGENT'] parameter to example_form.ajax.php or. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

RCE Code Injection PHP Securimage

NVD

CVSS 3.0

6.1

EPSS

0.2%

CVE-2017-14077 PHP

EPSS 0% CVSS 6.1

MEDIUM POC PATCH This Month

HTML Injection in Securimage 3.6.4 and earlier allows remote attackers to inject arbitrary HTML into an e-mail message body via the $_SERVER['HTTP_USER_AGENT'] parameter to example_form.ajax.php or. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

RCE Code Injection PHP +1

NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy