Lucene search
MitreCVELIST:CVE-2021-40845HistorySep 15, 2021 - 12:39 p.m.
CVE-2021-40845
2021-09-1512:39:43
mitre
www.cve.org
The web part of Zenitel AlphaCom XE Audio Server through 11.2.3.10, called AlphaWeb XE, does not restrict file upload in the Custom Scripts section at php/index.php. Neither the content nor extension of the uploaded files is checked, allowing execution of PHP code under the /cmd directory.
Related
prion
prion
Design/Logic Flaw
2021-09-15 13:15:00
packetstorm
packetstorm
Zenitel AlphaCom XE Audio Server 11.2.3.10 Shell Upload
2021-09-14 00:00:00
Zenitel AlphaCom XE Audio Server 11.2.3.10 Shell Upload
2021-09-15 00:00:00
cve
cve
CVE-2021-40845
2021-09-15 13:15:08
githubexploit
githubexploit
exploitdb
exploitdb
AlphaWeb XE - File Upload Remote Code Execution (RCE) (Authenticated)
2021-09-15 00:00:00
zdt
zdt
AlphaWeb XE - File Upload Remote Code Execution (Authenticated) Exploit
2021-09-15 00:00:00
Zenitel AlphaCom XE Audio Server 11.2.3.10 Shell Upload Vulnerability
2021-09-15 00:00:00
nvd
nvd
CVE-2021-40845
2021-09-15 13:15:08