Critical severity9.8NVD Advisory· Published Jun 16, 2017· Updated Jun 17, 2026

CVE-2017-9602

Description

KBVault Mysql Free Knowledge Base application package 0.16a comes with a FileExplorer/Explorer.aspx?id=/Uploads file-management component. An unauthenticated user can access the file upload and deletion functionality. Through this functionality, a user can upload an ASPX script to Uploads/Documents/ to run any arbitrary code.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Kbvault Mysql Project/Kbvault Mysql
cpe:2.3:a:kbvault_mysql_project:kbvault_mysql:0.16a:*:*:*:*:*:*:*
KBVault/Mysql Free Knowledge Basellm-create
Range: = 0.16a

Patches

Vulnerability mechanics

References

www.exploit-db.com/exploits/42184/nvdMitigationThird Party AdvisoryVDB Entry

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.003
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000