CVEvulnerability
CVE-2015-3884
8.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2017-03-17
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 6.5 MEDIUM — AV:N/AC:L/Au:S/C:P/I:P/A:P
- Weaknesses
- CWE-434
Description
Unrestricted file upload vulnerability in the (1) myAccount, (2) projects, (3) tasks, (4) tickets, (5) discussions, (6) reports, and (7) scheduler pages in qdPM 8.3 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in uploads/attachments/ or uploads/users/.
Affected configurations
• qdpm qdpm (<= 9.1)
Related
Weakness · CWE (1)
- CWE-434 Unrestricted Upload of File with Dangerous Type weakness
References
- http://packetstormsecurity.com/files/168559/qdPM-9.1-Authenticated-Shell-Upload.html Exploit, Third Party Advisory, VDB Entry
- http://rossmarks.uk/portfolio.php Third Party Advisory
- http://rossmarks.uk/whitepapers/qdPM_8.3.txt Exploit, Third Party Advisory
- http://packetstormsecurity.com/files/168559/qdPM-9.1-Authenticated-Shell-Upload.html Exploit, Third Party Advisory, VDB Entry
- http://rossmarks.uk/portfolio.php Third Party Advisory
- http://rossmarks.uk/whitepapers/qdPM_8.3.txt Exploit, Third Party Advisory