AutoSec Tools V-CMS inline_image_upload.php PHP File Upload And Execution (CVE-2011-4828)

An arbitrary file upload vulnerability has been reported in AutoSec Tools V-CMS...

CVE-2011-4828

creationtimestamp| type| source ---|---|--- 2012-04-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18738 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/vcmsupload.rb 2025-02-06 03:13:40+00:00| seen|...

CVE-2011-4828

CVE-2011-4828 affects AutoSec Tools V-CMS 1.0, specifically the inline_image_upload.php file upload feature. An unrestricted file upload allows remote attackers to execute arbitrary code by uploading a file with an executable extension and then accessing it via a direct request to the file in tem...