Security Advisory

CVE-2017-7281

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2017-04-12 22:00:00

Last updated 2024-08-05 15:56:36

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

An issue was discovered in Unitrends Enterprise Backup before 9.1.2. A lack of sanitization of user input in the createReportName and saveReport functions in recoveryconsole/bpl/reports.php allows for an authenticated user to create a randomly named file on disk with a user-controlled extension, contents, and path, leading to remote code execution, aka Unrestricted File Upload.

← Browse all CVEs View on cve.org ↗