• OpenEMR PHP File Upload Vulnerability
    Disclosure Date: 2013-02-13
    First seen: 2020-04-26
    exploit/unix/webapp/openemr_upload_exec
    This module exploits a vulnerability found in OpenEMR 4.1.1 By abusing the ofc_upload_image.php file from the openflashchart library, a malicious user can upload a file to the tmp-upload-images directory without any authentication, which results in arbitrary code execution. The module has been tested successfully on OpenEMR 4.1.1 over Ubuntu 10.04. Authors: - Gjoko Krstic <gjoko@zeroscience.mk> - juan vazquez <juan.vazquez@metasploit.com>
  • Open Flash Chart v2 Arbitrary File Upload
    Disclosure Date: 2009-12-14
    First seen: 2020-04-26
    exploit/unix/webapp/open_flash_chart_upload_exec
    This module exploits a file upload vulnerability found in Open Flash Chart version 2. Attackers can abuse the 'ofc_upload_image.php' file in order to upload and execute malicious PHP files. Authors: - Braeden Thomas - Gjoko Krstic <gjoko@zeroscience.mk> - Halim Cruzito - bcoles <bcoles@gmail.com>
2 metasploit modules found
Please note: Metasploit modules are only matched by CVE numbers. Visit metasploit web site for more details
This web site uses cookies for managing your session, storing preferences, website analytics and additional purposes described in our privacy policy.
By using this web site you are agreeing to CVEdetails.com terms of use!