CVE-2017-17098

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

The writeLog function in fn_common.php in gps-server.net GPS Tracking Software (self hosted) through 3.0 allows remote attackers to inject arbitrary PHP code via a crafted request that is mishandled during admin log viewing, as demonstrated by <?php system($_GET[cmd]); ?> in a login request.

Metrics

CVSS 3.0 9.8/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-94

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://gist.github.com/pak0s/ea7a80c2614d9cd43cfb8230c65c9fecPatch, Third Party Advisory
https://s1.gps-server.net/changelog.txtRelease Notes, Vendor Advisory
https://www.exploit-db.com/exploits/43431/Exploit, Third Party Advisory, VDB Entry
https://gist.github.com/pak0s/ea7a80c2614d9cd43cfb8230c65c9fecPatch, Third Party Advisory
https://s1.gps-server.net/changelog.txtRelease Notes, Vendor Advisory
https://www.exploit-db.com/exploits/43431/Exploit, Third Party Advisory, VDB Entry

Timeline

Published: Jan 2, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-170997.8There exists an unauthenticated SEH based Buffer Overflow vulnerability in the HTTP server of Flexense SyncBreeze Enterprise v10.1.16. When CVE-2017-17109.8A vulnerability in the Service Assistant GUI in IBM Storwize V7000 (2076) 8.1 could allow a remote attacker to perform a privilege escalatio CVE-2017-171019.8An issue was discovered in Apexis APM-H803-MPC software, as used with many different models of IP Camera. An unprotected CGI method inside t CVE-2017-171027.5Fiyo CMS 2.0.7 has SQL injection in /system/site.php via $_REQUEST['link'].CVE-2017-171038.8Fiyo CMS 2.0.7 has SQL injection in /apps/app_user/sys_user.php via $_POST[name] or $_POST[email]. This vulnerability can lead to escalation CVE-2017-171047.5Fiyo CMS 2.0.7 has an arbitrary file read vulnerability in dapur/apps/app_theme/libs/check_file.php via $_GET['src'] or $_GET['name'].CVE-2017-171059.8Zivif PR115-204-P-RS V2.3.4.2103 and V4.7.4.2121 (and possibly in-between versions) web cameras are vulnerable to unauthenticated, blind rem CVE-2017-171069.8Credentials for Zivif PR115-204-P-RS V2.3.4.2103 Webcams can be obtained by an unauthenticated remote attacker using a standard web /cgi-bin CVE-2017-171079.8Zivif PR115-204-P-RS V2.3.4.2103 web cameras contain a hard-coded cat1029 password for the root user. The SONIX operating system's setup ren CVE-2017-171089.8Path traversal vulnerability in the administrative panel in KonaKart eCommerce Platform version 8.7 and earlier could allow an attacker to d CVE-2017-17117.8IBM iNotes 8.5 and 9.0 SUService can be misguided into running malicious code from a DLL masquerading as a windows DLL in the temp directory CVE-2017-171109.8Techno Portfolio Management Panel 1.0 allows an attacker to inject SQL commands via a single.php?id= request.