CVE-2015-4524

MEDIUM Year: 2015
CVSS v2 Score
6.5
Medium
Weakness Type
CWE-434
View all →

Vulnerability Description

Unrestricted file upload vulnerability in EMC Documentum WebTop 6.7SP1 before P31, 6.7SP2 before P23, and 6.8 before P01; Documentum Administrator 6.7SP1 before P31, 6.7SP2 before P23, 7.0 before P18, 7.1 before P15, and 7.2 before P01; Documentum Digital Assets Manager 6.5SP6 before P25; Documentum Web Publishers 6.5 SP7 before P25; and Documentum Task Space 6.7SP1 before P31 and 6.7SP2 before P23 allows remote authenticated users to execute arbitrary code by uploading a file to the backend Content Server.

Related Vulnerabilities

CVE-2016-6918

CRITICAL
CVSS:10.0(Critical)

Lexmark Markvision Enterprise (MVE) before 2.4.1 allows remote attackers to execute arbitrary commands by uploading files. (

CWE-4342016

CVE-2019-10959

CRITICAL
CVSS:10.0(Critical)

BD Alaris Gateway Workstation Versions, 1.1.3 Build 10, 1.1.3 MR Build 11, 1.2 Build 15, 1.3.0 Build 14, 1.3.1 Build 13, This does not impact the latest firmware Versions 1.3.2 and 1.6.1, Additionally...

CWE-4342019

CVE-2019-7257

CRITICAL
CVSS:10.0(Critical)

Linear eMerge E3-Series devices allow Unrestricted File Upload.

CWE-4342019

CVE-2019-7268

CRITICAL
CVSS:10.0(Critical)

Linear eMerge 50P/5000P devices allow Unauthenticated File Upload.

CWE-4342019

CVE-2020-24186

CRITICAL
CVSS:10.0(Critical)

A Remote Code Execution vulnerability exists in the gVectors wpDiscuz plugin 7.0 through 7.0.4 for WordPress, which allows unauthenticated users to upload any type of file, including PHP files via the...

CWE-4342020

CVE-2020-35489

CRITICAL
CVSS:10.0(Critical)

The contact-form-7 (aka Contact Form 7) plugin before 5.3.2 for WordPress allows Unrestricted File Upload and remote code execution because a filename may contain special characters.

CWE-4342020