CVE-2015-9263

An issue was discovered in post2file.php in Up.Time Monitoring Station 7.5.0 (build 16) and 7.4.0 (build 13). It allows an attacker to upload an arbitrary file, such as a .php file that can execute arbitrary OS commands.

Score

CVSS 3.0 9.8 Critical

Status

Modified - cve@mitre.org

Published

2018-08-27

Last modified

2024-08-06

Weaknesses

CWE-434

Affected products

• Uptime Infrastructure Monitor (Idera)

References

• http://www.zeroscience.mk/en/vulnerabilities/ZSL-2015-5254.php
• https://www.exploit-db.com/exploits/37888/
• https://www.rapid7.com/db/modules/exploit/multi/http/uptime_file_upload_2