CVE-2017-17593

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Simple Chatting System 1.0 allows Arbitrary File Upload via view/my_profile.php, which places files under uploads/.

Metrics

CVSS 3.0 7.5/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-434

Affected software

VendorProductVersions
n/an/an/a

References

Timeline

Published
Dec 13, 2017
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2017

CVE-2017-175949.8DomainSale PHP Script 1.0 has SQL Injection via the domain.php id parameter.CVE-2017-175959.8Beauty Parlour Booking Script 1.0 has SQL Injection via the /list gender or city parameter.CVE-2017-175969.8Entrepreneur Job Portal Script 2.0.6 has SQL Injection via the jobsearch_all.php rid1 parameter.CVE-2017-175979.8Nearbuy Clone Script 3.2 has SQL Injection via the category_list.php search parameter.CVE-2017-175989.8Affiliate MLM Script 1.0 has SQL Injection via the product-category.php key parameter.CVE-2017-175999.8Advance Online Learning Management Script 3.1 has SQL Injection via the courselist.php subcatid or popcourseid parameter.CVE-2017-17607.1IBM WebSphere MQ 7.5, 8.0, and 9.0 could allow a local user to crash the queue manager agent thread and expose some sensitive information. ICVE-2017-176009.8Basic B2B Script 2.0.8 has SQL Injection via the product_details.php id parameter.CVE-2017-176019.8Cab Booking Script 1.0 has SQL Injection via the /service-list city parameter.CVE-2017-176029.8Advance B2B Script 2.1.3 has SQL Injection via the tradeshow-list-detail.php show_id or view-product.php pid parameter.CVE-2017-176039.8Advanced Real Estate Script 4.0.7 has SQL Injection via the search-results.php Projectmain, proj_type, searchtext, sell_price, or maxprice pCVE-2017-176049.8Entrepreneur Bus Booking Script 3.0.4 has SQL Injection via the booker_details.php sourcebus parameter.
CVE-2017-17593: High severity, CVSS 7.5 | Vulnix