CVE-2017-11760

CVE-2017-11760 describes a critical arbitrary PHP code execution vulnerability in ProjeQtOr versions prior to 6.3.2. This flaw allows authenticated attackers to upload malicious .php files disguised as images, which are then executed on the server. With a CVSS score of 8.8 (HIGH), this vulnerability is easily exploitable over the network with low attack complexity and no user interaction, potentially leading to complete compromise of confidentiality, integrity, and availability. While there is no evidence of active exploitation, public exploit code, or significant community discussion, its high severity and ease of exploitation warrant immediate patching.