CVE-2015-9263: Malicious File Upload
Published Aug 27, 2018
·Updated
An issue was discovered in post2file.php in Up.Time Monitoring Station 7.5.0 (build 16) and 7.4.0 (build 13). It allows an attacker to upload an arbitrary file, such as a .php file that can execute arbitrary OS commands.
Affected Software
2 affected components
IDERA Uptime Infrastructure Monitor=7.4.0
IDERA Uptime Infrastructure Monitor=7.5.0
Event History
Aug 27, 2018
CVE Published
via MITRE·04:00 AM
Data Sourced
via MITRE·04:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-9263?
CVE-2015-9263 is considered a critical vulnerability due to its ability to allow arbitrary file uploads.
2
How do I fix CVE-2015-9263?
To fix CVE-2015-9263, update your Idera Uptime Infrastructure Monitor to version 7.5.0 or later.
3
What software versions are affected by CVE-2015-9263?
CVE-2015-9263 affects Idera Uptime Infrastructure Monitor versions 7.4.0 and 7.5.0.
4
What type of attack does CVE-2015-9263 allow?
CVE-2015-9263 allows attackers to upload malicious files, including executable PHP files.
5
Is CVE-2015-9263 remotely exploitable?
Yes, CVE-2015-9263 is remotely exploitable, allowing attackers to compromise systems over the network.