CVE-2017-10665

PoC —

CVSS 3.0

7.8 high

EPSS

3%p87

Published

Aug 18, 2017 (Aug 18, 2017)

Modified

Jun 17, 2026

Description

Directory traversal vulnerability in ajaxfileupload.php in Kayson Group Ltd. phpGrid before 7.2.5 allows remote attackers to execute arbitrary code by uploading a crafted file with a .. (dot dot) in the file name.

Vendors: phpgrid
Products: phpgrid
Weakness: CWE-22
Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (3.2%)

In the news0 stories

No ingested article mentions this CVE yet.