Unrestricted File Upload Vulnerability in OSClass by OSClass
CVE-2014-8085

Currently unrated

Key Information:

Vendor: Osclass
Status: Osclass
Vendor: CVE Published:; 5 January 2015

What is CVE-2014-8085?

The OSClass application before version 3.4.3 is prone to an unrestricted file upload vulnerability in the CWebContact::doModel method located in the contact.php file. This security flaw permits remote attackers to upload malicious files with a PHP extension, allowing them to execute arbitrary PHP code upon direct access to the uploaded file. This vulnerability highlights the critical need for developers to implement stringent file validation and restrictions to safeguard web applications against potential exploits.

References

http://packetstormsecurity.com/files/129777/Osclass-3.4.2...

x_refsource_MISC

http://www.securityfocus.com/bid/71842

vdb-entryx_refsource_BID

http://karmainsecurity.com/KIS-2014-16

x_refsource_MISC

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Jan 5, 2015
Vulnerability Reserved
Oct 9, 2014

CVE-2014-8085 Data

JSON