CVE-2017-17098

high-risk
Published 2018-01-02

The writeLog function in fn_common.php in gps-server.net GPS Tracking Software (self hosted) through 3.0 allows remote attackers to inject arbitrary PHP code via a crafted request that is mishandled during admin log viewing, as demonstrated by <?php system($_GET[cmd]); ?> in a login request.

Do I need to act?

!
31.2% chance of exploitation in next 30 days
EPSS score — higher than 69% of all CVEs
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
!
1 public exploit available
43431
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
9
CVSS 9.8/10 Critical
NETWORK / LOW complexity

Affected Products (1)

Affected Vendors

Gps-Server

References (6)

Patch https://gist.github.com/pak0s/ea7a80c2614d9cd43cfb8230c65c9fec
Release Notes https://s1.gps-server.net/changelog.txt
Exploit https://www.exploit-db.com/exploits/43431/
Patch https://gist.github.com/pak0s/ea7a80c2614d9cd43cfb8230c65c9fec
Release Notes https://s1.gps-server.net/changelog.txt
Exploit https://www.exploit-db.com/exploits/43431/
53
/ 100
high-risk
Severity 32/34 · Critical
Exploitability 16/34 · Moderate
Exposure 5/34 · Minimal