Lucene search
+L

4 matches found

attackerkb
attackerkb
•added 2025/07/16 9:06 p.m.•17 views

CVE-2025-34121

An unauthenticated arbitrary file upload vulnerability exists in Idera Up.Time Monitoring Station versions up to and including 7.2. The wizards/post2file.php script accepts arbitrary POST parameters, allowing attackers to upload crafted PHP files to the webroot. Successful exploitation results in...

9.8CVSS6.5AI score0.1332EPSS
SaveExploits3References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/16 12:00 a.m.•1 views

CVE-2025-34121: Unrestricted Upload of File with Dangerous Type

An unauthenticated arbitrary file upload vulnerability exists in Idera Up.Time Monitoring Station versions up to and including 7.2. The wizards/post2file.php script accepts arbitrary POST parameters, allowing attackers to upload crafted PHP files to the webroot. Successful exploitation results in...

9.3CVSS6.2AI score0.02426EPSS
SaveExploits1References1
CNVD
CNVD
•added 2018/08/28 12:00 a.m.•18 views

Idera Up.time Monitoring Station Arbitrary File Upload Vulnerability

Idera Up.time Monitoring Station is a cross-platform server monitoring software from Idera. The software provides the server performance, availability and other indicators to collect, summarize and generate reports and other functions. An arbitrary file upload vulnerability exists in the...

9.8CVSS9.5AI score0.1332EPSS
SaveExploits2References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/08/27 12:00 a.m.•4 views

CVE-2015-9263: Unrestricted Upload of File with Dangerous Type

An issue was discovered in post2file.php in Up.Time Monitoring Station 7.5.0 build 16 and 7.4.0 build 13. It allows an attacker to upload an arbitrary file, such as a .php file that can execute arbitrary OS commands...

9.8CVSS8.5AI score0.1332EPSS
SaveExploits2References2
Rows per page
Query Builder