CVE-2017-10665

Directory traversal vulnerability in ajaxfileupload.php in Kayson Group Ltd. phpGrid before 7.2.5 allows remote attackers to execute arbitrary code by uploading a crafted file with a .. (dot dot) in the file name.

• CWE-22

• https://phpgrid.com/announcement/version-7-2-5/Patch, Vendor Advisory
• https://www.futureweb.at/security/CVE-2017-10665/Exploit, Third Party Advisory
• https://phpgrid.com/announcement/version-7-2-5/Patch, Vendor Advisory
• https://www.futureweb.at/security/CVE-2017-10665/Exploit, Third Party Advisory

Published

Aug 18, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-1066Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2017-10660Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2017-10661Race condition in fs/timerfd.c in the Linux kernel before 4.…7
• CVE-2017-10662The sanity_check_raw_super function in fs/f2fs/super.c in th…7.8
• CVE-2017-10663The sanity_check_ckpt function in fs/f2fs/super.c in the Lin…7.8
• CVE-2017-10664qemu-nbd in QEMU (aka Quick Emulator) does not ignore SIGPIP…7.5
• CVE-2017-10667In index.php in Zen Cart 1.6.0, the products_id parameter ca…
• CVE-2017-10668A Padding Oracle exists in OSCI-Transport 1.2 as used in OSC…
• CVE-2017-10669Signature Wrapping exists in OSCI-Transport 1.2 as used in O…
• CVE-2017-1067Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2017-10670An XML External Entity (XXE) issue exists in OSCI-Transport …
• CVE-2017-10671Heap-based Buffer Overflow in the de_dotdot function in libh…7.8