CVE-2021-40845

CVE-2021-40845 I. VULNERABILIDAD AlphaWeb XE: carga insegura de archivos autenticada que conduce a RCE II. REFERENCIA CVE CVE-2021-40845 III. PROVEEDOR https://www.zenitel.com/ IV. DESCRIPCIÓN La parte web del servidor de audio Zenitel AlphaCom XE hasta la versión 11.2.3.10, denominada AlphaWeb X...

CVE-2024-57784

CVE-2024-57784 Exploit Title: Authenticated Directory Traversal Vulnerability on Zenitel AlphaWeb XE Version 11.2.3.10 Date: 08/02/2025 Exploit Author: Safvan Parakkal Vendor Website: https://www.zenitel.com/ CVE: CVE-2024-57784 usage: CVE-2024-57784.py -h -u URL -f FILE optional arguments: -h,...

CVE-2024-57785

CVE-2024-57785 Exploit Title: Authenticated File Inclusion Vulnerability on Zenitel AlphaWeb XE Version 11.2.3.10 Date: 08/02/2025 Exploit Author: Safvan Parakkal Vendor Website: https://www.zenitel.com/ CVE: CVE-2024-57785 Usage: CVE-2024-57785.py -h -u URL -f FILE optional arguments: -h, --help...

EUVD-2024-53749

Malicious code in bioql PyPI...

EUVD-2024-53748

Malicious code in bioql PyPI...

CVE-2024-57785

Zenitel AlphaWeb XE v11.2.3.10 was discovered to contain a local file inclusion vulnerability via the component amcuploads.php...

Exploit for CVE-2024-57785

CVE-2024-57785 Exploit Title: Authenticated File Incl...

CVE-2024-57784

An issue in the component /php/scriptuploads.php of Zenitel AlphaWeb XE v11.2.3.10 allows attackers to execute a directory traversal...

CVE-2024-57785

Zenitel AlphaWeb XE v11.2.3.10 was discovered to contain a local file inclusion vulnerability via the component amcuploads.php...

CVE-2024-57785

Zenitel AlphaWeb XE v11.2.3.10 was discovered to contain a local file inclusion vulnerability via the component amcuploads.php...

Zenitel AlphaWeb XE 安全漏洞

Zenitel AlphaWeb XE is an embedded web server from Zenitel running on AlphaCom XE. A security vulnerability exists in Zenitel AlphaWeb XE version v11.2.3.10, which stems from a local file inclusion vulnerability discovered via the component amcuploads.php...

CVE-2024-57785

Zenitel AlphaWeb XE v11.2.3.10 is susceptible to a local file inclusion (LFI) vulnerability within the amc_uploads.php component. The root cause is identified as the use of incorrectly-resolved names or references (CWE-706). An authenticated attacker could exploit this to read arbitrary files fro...

CVE-2024-57784: Improper Limitation of a Pathname to a Restricted Directory

An issue in the component /php/scriptuploads.php of Zenitel AlphaWeb XE v11.2.3.10 allows attackers to execute a directory traversal...

CVE-2024-57785: Use of Incorrectly-Resolved Name or Reference

Zenitel AlphaWeb XE v11.2.3.10 was discovered to contain a local file inclusion vulnerability via the component amcuploads.php...

PT-2025-3571 · Zenitel · Zenitel Alphaweb Xe

Name of the Vulnerable Software and Affected Versions: Zenitel AlphaWeb XE version 11.2.3.10 Description: An issue in the component /php/script uploads.php allows attackers to execute a directory traversal. Recommendations: For Zenitel AlphaWeb XE version 11.2.3.10, consider restricting access to...

CVE-2024-57784

An issue in the component /php/scriptuploads.php of Zenitel AlphaWeb XE v11.2.3.10 allows attackers to execute a directory traversal...

CVE-2024-57784

The Zenitel AlphaWeb XE version v11.2.3.10 is vulnerable to an authenticated directory traversal issue within the /php/script_uploads.php component. This vulnerability allows an attacker to perform directory traversal to read arbitrary files on the application service. Proof-of-concept (PoC) code...

CVE-2021-40845

The web part of Zenitel AlphaCom XE Audio Server through 11.2.3.10, called AlphaWeb XE, does not restrict file upload in the Custom Scripts section at php/index.php. Neither the content nor extension of the uploaded files is checked, allowing execution of PHP code under the /cmd directory...

CVE-2021-40845: Unrestricted Upload of File with Dangerous Type

The web part of Zenitel AlphaCom XE Audio Server through 11.2.3.10, called AlphaWeb XE, does not restrict file upload in the Custom Scripts section at php/index.php. Neither the content nor extension of the uploaded files is checked, allowing execution of PHP code under the /cmd directory...

Zenitel AlphaCom XE Audio Server 11.2.3.10 Shell Upload

I. VULNERABILITY ------------------------- AlphaWeb XE - Authenticated Insecure File Upload leading to RCE II. CVE REFERENCE ------------------------- CVE-2021-40845 III. VENDOR ------------------------- https://www.zenitel.com/ IV. DESCRIPTION ------------------------- The web part of Zenitel...