CVE-2017-11366

Name: CVE-2017-11366
Creator: NVD / NIST
Published: 2017-08-21T01:29:00.513+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 7.75%

Last modified Jun 17, 2026

CVE-2017-11366 is a vulnerability of currently unknown severity. components/filemanager/class.filemanager.php in Codiad before 2.8.4 is vulnerable to remote command execution because shell commands can be embedded in parameter values, as demonstrated by search_file_type.. EPSS estimates a 7.75% chance of exploitation in the next 30 days.

Description

components/filemanager/class.filemanager.php in Codiad before 2.8.4 is vulnerable to remote command execution because shell commands can be embedded in parameter values, as demonstrated by search_file_type.

Metrics

EPSS Probability

7.75%

93.9th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

CWE-78

Affected Software

Vendor	Product	Versions
Codiad	Codiad	<= 2.8.3

References

http://www.jianshu.com/p/41ac7ac2a7afExploit, Third Party Advisory
https://github.com/Codiad/Codiad/issues/1011Third Party Advisory
https://github.com/Codiad/Codiad/pull/1013Third Party Advisory
https://github.com/Codiad/Codiad/pull/1013/commits/b3645b4c6718cef6de7003f41aafe7bfcc0395d1Patch, Third Party Advisory
http://www.jianshu.com/p/41ac7ac2a7afExploit, Third Party Advisory
https://github.com/Codiad/Codiad/issues/1011Third Party Advisory
https://github.com/Codiad/Codiad/pull/1013Third Party Advisory
https://github.com/Codiad/Codiad/pull/1013/commits/b3645b4c6718cef6de7003f41aafe7bfcc0395d1Patch, Third Party Advisory

Timeline

Published: Aug 21, 2017
Last Modified: Jun 17, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2017-11366?

How severe is CVE-2017-11366?

Severity scoring for CVE-2017-11366 is pending analysis. The EPSS model estimates a 7.75% probability of exploitation in the next 30 days.

How do I fix CVE-2017-11366?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2017-11366?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST