Vulnerability Details : CVE-2015-1587
Public exploit exists!
Unrestricted file upload vulnerability in file_to_index.php in Maarch LetterBox 2.8 and earlier and GEC/GED 1.4 and earlier allows remote attackers to execute arbitrary PHP code by uploading a file with a PHP extension, then accessing it via a request to a predictable filename in tmp/.
Products affected by CVE-2015-1587
- cpe:2.3:a:maarch:letterbox:*:*:*:*:*:*:*:*
- cpe:2.3:a:maarch:gec\/ged:*:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2015-1587
86.93%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 99 %
Percentile, the proportion of vulnerabilities that are scored at or less
Metasploit modules for CVE-2015-1587
-
Maarch LetterBox Unrestricted File Upload
Disclosure Date: 2015-02-11First seen: 2020-04-26exploit/unix/webapp/maarch_letterbox_file_uploadThis module exploits a file upload vulnerability on Maarch LetterBox 2.8 due to a lack of session and file validation in the file_to_index.php script. It allows unauthenticated users to upload files of any type and subsequently execute PHP scripts in the context of t
CVSS scores for CVE-2015-1587
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
---|---|---|---|---|---|---|
7.5
|
HIGH | AV:N/AC:L/Au:N/C:P/I:P/A:P |
10.0
|
6.4
|
NIST |
References for CVE-2015-1587
-
http://asylum.seraum.com/Security-Alert-GED-ECM-Maarch-Critical-Vulnerabilities.html
Exploit
-
http://www.exploit-db.com/exploits/35113
MAARCH 1.4 - Arbitrary File UploadExploit
-
http://packetstormsecurity.com/files/130383/Maarch-LetterBox-2.8-Unrestricted-File-Upload.html
Maarch LetterBox 2.8 Unrestricted File Upload ≈ Packet StormExploit
Jump to