appRain CMF Arbitrary PHP File Upload (CVE-2012-1153)

An arbitrary file upload vulnerability has been reported in appRain's Content Management Framework...

CVE-2012-1153

Summary of technical details (CVE-2012-1153): appRain CMF is vulnerable to an unrestricted/arbitrary PHP file upload via the helper file uploadify.php in the uploads/ directory. Affected version: CMF 0.1.5 and earlier. Root cause: inadequate validation in the upload mechanism allows an attacker t...

CVE-2012-1153

creationtimestamp| type| source ---|---|--- 2012-05-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18922 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/apprainuploadexec.rb 2025-02-06 03:13:40+00:00| seen|...

appRain CMF Arbitrary PHP File Upload Vulnerability

Exploit for php platform in category web applications This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

appRain CMF Arbitrary PHP File Upload Vulnerability

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 "appRain CMF...

appRain CMF 'uploadify.php' Remote Arbitrary File Upload Vulnerability

appRain CMF is prone to an arbitrary-file-upload vulnerability because the application fails to adequately sanitize user-supplied input. An attacker may leverage this issue to upload arbitrary files to the affected server; this can result in arbitrary code execution within the context of the...