CVE-2012-3811 Unrestricted file upload vulnerability in ImageUpload.ashx in the Wallboard application in Avaya IP Office Customer Call Reporter 7.0 before 7.0.5.8 Q1 2012 Maintenance Release and 8.0 before 8.0.9.13...
HighCVSS 10.0
EPSS 62.5%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Unrestricted file upload vulnerability in ImageUpload.ashx in the Wallboard application in Avaya IP Office Customer Call Reporter 7.0 before 7.0.5.8 Q1 2012 Maintenance Release and 8.0 before 8.0.9.13 Q1 2012 Maintenance Release allows remote attackers to execute arbitrary code by uploading an executable file and then accessing it via a direct request.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| avaya ip office customer call reporter | = 7.0 | No fix listed |
| avaya ip office customer call reporter | = 8.0 | No fix listed |
References
- zerodayinitiative.com
- downloads.avaya.com vendor-advisory