← back
CVE-2017-12929

CVE-2017-12929

EPSS 10.1%
Arbitrary File Upload in resource.php of TecnoVISION DLX Spot Player4 version >1.5.10 allows remote authenticated users to upload arbitrary files leading to Remote Command Execution.
Affected products
n/a · n/a
public PoCs found — 3
cve_referencepacketstormsecurity.com/files/144258/DlxSpot-Shell-Upload.htmlunverifiedexploitdbwww.exploit-db.com/exploits/42753unverifiedexploitdbwww.exploit-db.com/exploits/42755unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://packetstormsecurity.com/files/144258/DlxSpot-Shell-Upload.html