Vulnerability Description
An issue was discovered in post2file.php in Up.Time Monitoring Station 7.5.0 (build 16) and 7.4.0 (build 13). It allows an attacker to upload an arbitrary file, such as a .php file that can execute arbitrary OS commands.
CVSS Score
CRITICAL
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Idera | Uptime Infrastructure Monitor | 7.4.0 |
Related Weaknesses (CWE)
References
- http://www.zeroscience.mk/en/vulnerabilities/ZSL-2015-5254.phpExploitThird Party Advisory
- https://www.exploit-db.com/exploits/37888/ExploitThird Party AdvisoryVDB Entry
- https://www.rapid7.com/db/modules/exploit/multi/http/uptime_file_upload_2Third Party Advisory
- http://www.zeroscience.mk/en/vulnerabilities/ZSL-2015-5254.phpExploitThird Party Advisory
- https://www.exploit-db.com/exploits/37888/ExploitThird Party AdvisoryVDB Entry
- https://www.rapid7.com/db/modules/exploit/multi/http/uptime_file_upload_2Third Party Advisory
FAQ
What is CVE-2015-9263?
CVE-2015-9263 is a vulnerability with a CVSS score of 9.8 (CRITICAL). An issue was discovered in post2file.php in Up.Time Monitoring Station 7.5.0 (build 16) and 7.4.0 (build 13). It allows an attacker to upload an arbitrary file, such as a .php file that can execute ar...
How severe is CVE-2015-9263?
CVE-2015-9263 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2015-9263?
Check the references section above for vendor advisories and patch information. Affected products include: Idera Uptime Infrastructure Monitor.