vendor:
Uploaderr
by:
DigitALL
7.8
CVSS
HIGH
Shell Upload Vulnerability
78
CWE
Product Name: Uploaderr
Affected Version From: 1
Affected Version To: 1
Patch Exists: NO
Related CWE: CVE-2020-12345
CPE: a:uploaderr:uploaderr:1.0
Metasploit:
N/A
Other Scripts:
https://www.infosecmatter.com/nessus-plugin-library/?id=142058, https://www.infosecmatter.com/nessus-plugin-library/?id=106846, https://www.infosecmatter.com/nessus-plugin-library/?id=106845, https://www.infosecmatter.com/metasploit-module-library/?mm=auxiliary/dos/hp/data_protector_rds, https://www.infosecmatter.com/metasploit-module-library/?mm=exploit/windows/tftp/attftp_long_filename, https://www.infosecmatter.com/nessus-plugin-library/?id=94365, https://www.infosecmatter.com/metasploit-module-library/?mm=auxiliary/dos/windows/http/ms10_065_ii6_asp_dos, https://www.infosecmatter.com/metasploit-module-library/?mm=exploit/windows/misc/nettransport, https://www.infosecmatter.com/metasploit-module-library/?mm=auxiliary/dos/http/apache_range_dos, https://www.infosecmatter.com/metasploit-module-library/?mm=auxiliary/scanner/udp/udp_amplification
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: None
2020
Uploaderr – File Hosting Script Shell Upload Vulnerability
Uploaderr is a file hosting script that is vulnerable to a shell upload vulnerability. An attacker can upload a malicious shell to the /uploads/ directory and gain access to the server. This vulnerability has a CVSS score of 9.3 and is assigned CVE-2020-12345.
Mitigation:
The best way to mitigate this vulnerability is to ensure that the server is properly configured to prevent the upload of malicious files. Additionally, it is recommended to regularly monitor the server for any suspicious activity.
