Vulnerability in N/a
CVE-2015-9263
An issue was discovered in post2file.php in Up.Time Monitoring Station 7.5.0 (build 16) and 7.4.0 (build 13). It allows an attacker to upload an arbitrary file, such as a .php file that can execute arbitrary OS commands.
EPSS: 0.634 (98.4th percentile) — read the EPSS interpretation.
Affected products
- N/a — versions n/a
Public proof-of-concept exploits
References
- www.zeroscience.mk/en/vulnerabilities/ZSL-2015-5254.php (x_refsource_MISC)
- 37888 (exploit, x_refsource_EXPLOIT-DB)
- www.rapid7.com/db/modules/exploit/multi/http/uptime_file_upload_2 (x_refsource_MISC)
Frequently asked questions
- What is CVE-2015-9263?
- CVE-2015-9263 is a vulnerability in N/a. Published 2018-08-27.
- Is CVE-2015-9263 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.