CVE-2017-16666

PoC ×4—

CVSS 3.0

8.8 high

EPSS

81%p100

Published

Jan 5, 2018 (Jan 5, 2018)

Modified

Jun 17, 2026

Description

Xplico before 1.2.1 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the name of an uploaded PCAP file. NOTE: this issue can be exploited without authentication by leveraging the user registration feature.

Vendors: xplico
Products: xplico
Weakness: CWE-78
Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (80.8%)

In the news0 stories

No ingested article mentions this CVE yet.