Unrestricted File Upload Vulnerability in GoAutoDial GoAdmin CE
CVE-2015-2842

Currently unrated

Key Information:

Vendor

Goautodial

Status
Goadmin Ce
Vendor
CVE Published:
12 May 2015

What is CVE-2015-2842?

The GoAutoDial GoAdmin CE product contains a vulnerability that allows remote attackers to upload files with executable extensions through the audiostore upload functionality. By exploiting this flaw, attackers can execute arbitrary code on the server by accessing the uploaded files directly. This issue arises specifically in the go_audiostore.php script, affecting versions prior to 3.3-1421902800, and poses a significant risk to the security of the affected systems.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

http://www.securityfocus.com/archive/1/535319/100/1100/th...
mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/74281
vdb-entryx_refsource_BID
http://goautodial.org/news/21
x_refsource_CONFIRM

EPSS Score

43% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.