CVE-2013-4949

Unrestricted file upload vulnerability in view.php in Machform 2 allows remote attackers to execute arbitrary PHP code by uploading a PHP file, then accessing…

published July 29, 2013

CVSS
—
EPSS
5%
Percentile
92.7
In the wild
Unconfirmed
What it is

Unrestricted file upload vulnerability in view.php in Machform 2 allows remote attackers to execute arbitrary PHP code by uploading a PHP file, then accessing it via a direct request to the file in the upload form's directory in data/.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05453 · 92.7th percentile
Published
2013-07-29T23:00Z
EPSS history
Timeline
  • 29 JUL 23:00Z
    Unrestricted file upload vulnerability in view.php in Machform 2 allows remote attackers to execute arbitrary PHP code by uploading a PHP file, then accessing…
    cvelistv5