CVE-2015-9263 An issue was discovered in post2file.php in Up.Time Monitoring Station 7.5.0 (build 16) and 7.4.0 (build 13). It allows an attacker to upload an arbitrary file, such as a .php file that can execute ar...
CriticalCVSS 9.8
EPSS 13.2%
Framework module
- Published
- Updated
- Exploit status
- Public exploit available
Description
An issue was discovered in post2file.php in Up.Time Monitoring Station 7.5.0 (build 16) and 7.4.0 (build 13). It allows an attacker to upload an arbitrary file, such as a .php file that can execute arbitrary OS commands.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| idera uptime infrastructure monitor | = 7.4.0 | No fix listed |
| idera uptime infrastructure monitor | = 7.5.0 | No fix listed |
References
- www.zeroscience.mk exploit third-party-advisory
- 37888 exploit third-party-advisory vdb-entry
- www.rapid7.com third-party-advisory