high7.5Public exploit code
CVE-2015-3203
Unrestricted file upload vulnerability in h5ai before 0.25.0 allows remote attackers to execute arbitrary code by uploading a file with an executable extension…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- h5ai < 0.25.0 - Unrestricted Arbitrary File Upload2015-09-22 · webapps · php
Impact
Unrestricted file upload vulnerability in h5ai before 0.25.0 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in the directory specified by the href parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| H5ai Project | H5ai | through 0.24.1 |