Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Idera Up.Time ≤ 7.2 post2file.php Arbitrary File Upload RCE
Vulnerability Description
An unauthenticated arbitrary file upload vulnerability exists in Idera Up.Time Monitoring Station versions up to and including 7.2. The `wizards/post2file.php` script accepts arbitrary POST parameters, allowing attackers to upload crafted PHP files to the webroot. Successful exploitation results in remote code execution as the web server user. NOTE: The bypass for this vulnerability is tracked as CVE-2015-9263.
CVSS Information
N/A
Vulnerability Type
危险类型文件的不加限制上传
Vulnerability Title
Idera Up.Time Monitoring Station 安全漏洞
Vulnerability Description
Idera Up.Time Monitoring Station是美国Idera公司的一个跨平台服务器监控软件。 Idera Up.Time Monitoring Station 7.2及之前版本存在安全漏洞，该漏洞源于任意文件上传，可能导致远程代码执行。
CVSS Information
N/A
Vulnerability Type
N/A