CVE-2014-9619
HIGHNetsweeper < 3.1.10, 4.0.x < 4.0.9, 4.1.x < 4.1.2 - Authenticated PHP Code Execution via File Upload
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2014-9619. PoCs published by Anastasios Monachos.
AI-analyzed exploit summary This writeup describes an arbitrary file upload vulnerability in Netsweeper 4.0.8, allowing authenticated admin users to upload and execute malicious PHP code disguised as a GIF file. The exploit leverages the AJAX file manager to bypass restrictions and achieve remote code execution.
Description
Unrestricted file upload vulnerability in webadmin/ajaxfilemanager/ajaxfilemanager.php in Netsweeper before 3.1.10, 4.0.x before 4.0.9, and 4.1.x before 4.1.2 allows remote authenticated users with admin privileges on the Cloud Manager web console to execute arbitrary PHP code by uploading a file with a double extension, then accessing it via a direct request to the file in webadmin/deny/images/, as demonstrated by secuid0.php.gif.
Exploits (1)
This writeup describes an arbitrary file upload vulnerability in Netsweeper 4.0.8, allowing authenticated admin users to upload and execute malicious PHP code disguised as a GIF file. The exploit leverages the AJAX file manager to bypass restrictions and achieve remote code execution.
References (2)
Scores
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H