CVE-2014-9619 Unrestricted file upload vulnerability in webadmin/ajaxfilemanager/ajaxfilemanager.php in Netsweeper before 3.1.10, 4.0.x before 4.0.9, and 4.1.x before 4.1.2 allows remote authenticated users with ad...
HighCVSS 7.2
EPSS 7.4%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Unrestricted file upload vulnerability in webadmin/ajaxfilemanager/ajaxfilemanager.php in Netsweeper before 3.1.10, 4.0.x before 4.0.9, and 4.1.x before 4.1.2 allows remote authenticated users with admin privileges on the Cloud Manager web console to execute arbitrary PHP code by uploading a file with a double extension, then accessing it via a direct request to the file in webadmin/deny/images/, as demonstrated by secuid0.php.gif.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| netsweeper | <= 3.1.9 | No fix listed |
| netsweeper | = 4.0.0 | No fix listed |
| netsweeper | = 4.0.1 | No fix listed |
| netsweeper | = 4.0.2 | No fix listed |
| netsweeper | = 4.0.3 | No fix listed |
| netsweeper | = 4.0.4 | No fix listed |
| netsweeper | = 4.0.5 | No fix listed |
| netsweeper | = 4.0.6 | No fix listed |
| netsweeper | = 4.0.7 | No fix listed |
| netsweeper | = 4.0.8 | No fix listed |
| netsweeper | = 4.1.0 | No fix listed |
| netsweeper | = 4.1.1 | No fix listed |
References
- packetstormsecurity.com third-party-advisory vdb-entry
- 37932 exploit third-party-advisory vdb-entry