What’s Vulnerable › Vulnerabilities

CVE-2015-9263

• Severity: critical (CVSS 9.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 13.3% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2018-08-27 · updated 2026-06-17
• Weakness: CWE-434

Description

An issue was discovered in post2file.php in Up.Time Monitoring Station 7.5.0 (build 16) and 7.4.0 (build 13). It allows an attacker to upload an arbitrary file, such as a .php file that can execute arbitrary OS commands.

Affected products

• Idera Uptime Infrastructure Monitor: 7.4.0, 7.5.0

References

• http://www.zeroscience.mk/en/vulnerabilities/ZSL-2015-5254.php
• https://www.exploit-db.com/exploits/37888/
• https://www.rapid7.com/db/modules/exploit/multi/http/uptime_file_upload_2
• http://www.zeroscience.mk/en/vulnerabilities/ZSL-2015-5254.php
• https://www.exploit-db.com/exploits/37888/
• https://www.rapid7.com/db/modules/exploit/multi/http/uptime_file_upload_2

Get alerted when CVE-2015-9263 or the next vulnerability affects your stack