CVEブラウザに戻る

CVE-2015-2842

CRITICAL

10.0

CVSS Severity Score

EPSS Score0.0870%

EPSS Percentile26.82th

Published2015年5月12日

Last Modified2026年5月6日

Vulnerability Description

Unrestricted file upload vulnerability in go_audiostore.php in the audiostore (Voice Files) upload functionality in GoAutoDial GoAdmin CE 3.x before 3.3-1421902800 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in sounds/.

Affected Platforms (CPE)

📦

Goautodial

Goadmin Ce

= 3.0

📦

Goautodial

Goadmin Ce

= 3.3

References & Advisories

🔗 http://goautodial.org/news/21

🔗 http://packetstormsecurity.com/files/131543/GoAutoDial-SQL-Injection-Command-Execution-File-Upload.html

🔗 http://www.securityfocus.com/archive/1/535319/100/1100/threaded

🔗 http://www.securityfocus.com/bid/74281

🔗 https://www.exploit-db.com/exploits/36807/

🔗 http://goautodial.org/news/21

🔗 http://packetstormsecurity.com/files/131543/GoAutoDial-SQL-Injection-Command-Execution-File-Upload.html

🔗 http://www.securityfocus.com/archive/1/535319/100/1100/threaded

関連する脆弱性情報

CVE-2015-284410.0

The cpanel function in go_site.php in GoAutoDial GoAdmin CE before 3.3-1420434000 allows remote attackers to execute arbitrary com...

CVE-2015-284510.0

The cpanel function in go_site.php in GoAutoDial GoAdmin CE before 3.3-1421902800 allows remote attackers to execute arbitrary com...

CVE-2015-28437.5

Multiple SQL injection vulnerabilities in GoAutoDial GoAdmin CE before 3.3-1421902800 allow remote attackers to execute arbitrary ...

CVE-2026-121917.8

A vulnerability was found in Comma AI Openpilot 0.11. This issue affects the function pickle.load/pickle.loads of the file selfdri...