Unrestricted File Upload Vulnerability in eLitius by eLitius
CVE-2009-1659

Currently unrated

Key Information:

Vendor: Intelliants
Status: Elitius
Vendor: CVE Published:; 18 May 2009

🔔 Create Intelliants Vulnerability Alert

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2009-1659?

The eLitius 1.0 application suffers from an unrestricted file upload vulnerability in the admin/uploadimage.php script. This flaw allows remote attackers to bypass access controls, enabling them to upload and potentially execute arbitrary files by disguising them as valid image formats, such as image/gif. Once uploaded, attackers can make these files accessible by requesting them from the admin/banners/ path, posing significant security risks to the web application.

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2009-1659 - Proof of Concept

References

http://www.securityfocus.com/bid/34813

vdb-entryx_refsource_BID

https://exchange.xforce.ibmcloud.com/vulnerabilities/50305

vdb-entryx_refsource_XF

http://www.vupen.com/english/advisories/2009/1248

vdb-entryx_refsource_VUPEN

Download the Critical Vulnerability Management Cheat Sheet

Timeline

🟡
Public PoC available
May 18, 2009
👾
Exploit known to exist
May 18, 2009
Vulnerability published
May 18, 2009
Vulnerability Reserved
May 17, 2009

CVE-2009-1659 Data

JSON