critical9.8
CVE-2015-9263
An issue was discovered in post2file.php in Up.Time Monitoring Station 7.5.0 (build 16) and 7.4.0 (build 13).
Impact
An issue was discovered in post2file.php in Up.Time Monitoring Station 7.5.0 (build 16) and 7.4.0 (build 13). It allows an attacker to upload an arbitrary file, such as a .php file that can execute arbitrary OS commands.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Idera | Uptime Infrastructure Monitor | Versions 7.4.0, 7.5.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.zeroscience.mk/en/vulnerabilities/ZSL-2015-5254.php
- https://www.exploit-db.com/exploits/37888/
- https://www.rapid7.com/db/modules/exploit/multi/http/uptime_file_upload_2
- http://www.zeroscience.mk/en/vulnerabilities/ZSL-2015-5254.php
- https://www.exploit-db.com/exploits/37888/
- https://www.rapid7.com/db/modules/exploit/multi/http/uptime_file_upload_2