CVE-2017-17736

PoC —

CVSS 3.0

9.8 critical

EPSS

68%p99

Published

Mar 23, 2018 (Mar 23, 2018)

Modified

Jun 17, 2026

Description

Kentico 9.0 before 9.0.51 and 10.0 before 10.0.48 allows remote attackers to obtain Global Administrator access by visiting CMSInstall/install.aspx and then navigating to the CMS Administration Dashboard.

Vendors: kentico
Products: xperience
Weakness: CWE-425
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (68.5%)

In the news0 stories

No ingested article mentions this CVE yet.