What is CVE-2015-2842?

CVE-2015-2842 is a vulnerability in Goautodial Goadmin_ce. Published 2015-05-12.

Is CVE-2015-2842 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Goautodial Goadmin_ce

CVE-2015-2842

Unrestricted file upload vulnerability in go_audiostore.php in the audiostore (Voice Files) upload functionality in GoAutoDial GoAdmin CE 3.x before 3.3-1421902800 allows remote attackers to execute arbitrary code by uploading a file with…

EPSS: 0.439 (97.6th percentile) — read the EPSS interpretation.

Affected products

Goautodial Goadmin_ce — versions 3.0, 3.3
N/a — versions n/a

Public proof-of-concept exploits

TarunYenni/GoAutoDial-CE-3.3-Exploit-Authentication-Bypass-Command-Injection

References

20150421 GoAutoDial 3.3 multiple vulnerabilities (mailing-list, x_refsource_BUGTRAQ)
74281 (vdb-entry, x_refsource_BID)
cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)
36807 (Exploit, exploit, x_refsource_EXPLOIT-DB)
cve@mitre.org (x_refsource_MISC)

Frequently asked questions

What is CVE-2015-2842?: CVE-2015-2842 is a vulnerability in Goautodial Goadmin_ce. Published 2015-05-12.
Is CVE-2015-2842 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.