CVE-2017-15990

published 2017-10-31

CVE-2017-15990: Php Inventory & Invoice Management System allows Arbitrary File Upload via dashboard/edit_myaccountdetail/.

Priority P2 67 critical 9.8 CVSS 3.1

AV N AC L PR N UI N S U C H I H A H

EXPLOIT

Php Inventory & Invoice Management System allows Arbitrary File Upload via dashboard/edit_myaccountdetail/.

Detection & IOCs extracted from sources · hover to see the quote

url http://localhost/[PATH]/index.php/dashboard/edit_myaccountdetail/↗

path images/user_pics/↗

path images/logo/↗

path images/product_images/↗

path images/service_providers/↗

url http://localhost/[PATH]/images/user_pics/[...].php↗

• → Monitor POST requests to the endpoint /index.php/dashboard/edit_myaccountdetail/ containing a file upload (multipart/form-data) where the uploaded filename has a PHP (or other executable) extension, indicating an attempt to upload a webshell. ↗

• · The exploit path uses [PATH] as a placeholder; the actual installation directory of Php Inventory will vary per deployment. Detections must account for variable base paths. ↗
• · The vulnerability requires an authenticated user session ('allows an users upload arbitrary file'), so exploitation presupposes valid credentials. Detection should correlate file upload events with authenticated sessions. ↗

CVSS provenance

nvd v3.1 9.8 CRITICAL CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

nvd v2.0 7.5 HIGH AV:N/AC:L/Au:N/C:P/I:P/A:P

CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-434