PT-2018-4572 · Uptime · Up.Time Monitoring Station

Crash + 4 · Publicado 2018-08-27 · Atualizado 2025-07-17 · CVE-2015-9263

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Up.Time Monitoring Station versions 7.4.0 (build 13) through 7.5.0 (build 16)

Description An issue in post2file.php allows an attacker to upload arbitrary files, including .php files that can execute arbitrary OS commands.

Recommendations For versions 7.4.0 (build 13) through 7.5.0 (build 16), consider restricting access to the post2file.php script until a fix is available. As a temporary workaround, disabling the execution of uploaded files can help minimize the risk of exploitation.

Exploit

Correção

Unrestricted File Upload

Enumeração de Fraquezas

CWE-434

Identificadores relacionados

CVE-2015-9263

Produtos afetados

Up.Time Monitoring Station

Referências · 5

• 🔥 https://exploit-db.com/exploits/37888 · Exploit
• 🔥 http://zeroscience.mk/en/vulnerabilities/ZSL-2015-5254.php · Exploit
• https://t.me/cvetracker/28006 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2015-9263 · Nota de Segurança
• https://rapid7.com/db/modules/exploit/multi/http/uptime_file_upload_2 · Nota