Lucene search
PRIOn knowledge basePRION:CVE-2021-40845HistorySep 15, 2021 - 1:15 p.m.
Design/Logic Flaw
2021-09-1513:15:00
PRIOn knowledge base
www.prio-n.com
6
The web part of Zenitel AlphaCom XE Audio Server through 11.2.3.10, called AlphaWeb XE, does not restrict file upload in the Custom Scripts section at php/index.php. Neither the content nor extension of the uploaded files is checked, allowing execution of PHP code under the /cmd directory.
| CPE | Name | Operator | Version |
|---|---|---|---|
| alphacom_xe_audio_server | le | 11.2.3.10 |
Related
cvelist
cvelist
CVE-2021-40845
2021-09-15 12:39:43
cve
cve
CVE-2021-40845
2021-09-15 13:15:08
githubexploit
githubexploit
exploitdb
exploitdb
AlphaWeb XE - File Upload Remote Code Execution (RCE) (Authenticated)
2021-09-15 00:00:00
zdt
zdt
AlphaWeb XE - File Upload Remote Code Execution (Authenticated) Exploit
2021-09-15 00:00:00
Zenitel AlphaCom XE Audio Server 11.2.3.10 Shell Upload Vulnerability
2021-09-15 00:00:00
nvd
nvd
CVE-2021-40845
2021-09-15 13:15:08
packetstorm
packetstorm
Zenitel AlphaCom XE Audio Server 11.2.3.10 Shell Upload
2021-09-15 00:00:00
Zenitel AlphaCom XE Audio Server 11.2.3.10 Shell Upload
2021-09-14 00:00:00