CVE-2012-1153

EPSS 32.4%

Unrestricted file upload vulnerability in addons/uploadify/uploadify.php in appRain CMF 0.1.5 and earlier allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in the uploads directory.

Affected products

n/a · n/a

public PoCs found — 4

cve_referencewww.exploit-db.com/exploits/18392unverified cve_referencewww.exploit-db.com/exploits/18922unverified exploitdbwww.exploit-db.com/exploits/18922unverified exploitdbwww.exploit-db.com/exploits/18392unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://archives.neohapsis.com/archives/bugtraq/2012-01/0128.html https://exchange.xforce.ibmcloud.com/vulnerabilities/72466 http://www.exploit-db.com/exploits/18392 http://www.exploit-db.com/exploits/18922 http://www.openwall.com/lists/oss-security/2012/03/09/5 http://www.openwall.com/lists/oss-security/2012/03/10/5 http://www.osvdb.org/78473 http://www.securityfocus.com/bid/51576