cve/2017/CVE-2017-7447.md

CVE-2017-7447

Description

HelpDEZk 1.1.1 has CSRF in admin/home#/logos/ with an impact of remote execution of arbitrary PHP code.

POC

Reference

• http://rungga.blogspot.co.id/2017/04/multiple-csrf-remote-code-execution.html
• https://github.com/albandes/helpdezk/issues/2
• https://www.exploit-db.com/exploits/41824/

Github

No PoCs found on GitHub currently.