Skip to content

Commit 8757743

Browse files
committed
Update description
1 parent cfe9748 commit 8757743

File tree

1 file changed

+4
-0
lines changed

1 file changed

+4
-0
lines changed

modules/exploits/multi/http/uptime_file_upload_1.rb

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -19,6 +19,10 @@ def initialize(info = {})
1919
This module exploits an arbitrary file upload vulnerability found within the Up.Time
2020
monitoring server 7.2 and below. A malicious entity can upload a PHP file into the
2121
webroot without authentication, leading to arbitrary code execution.
22+
23+
Although the vendor fixed Up.Time to prevent this vulnerability, it was not properly
24+
mitigated. To exploit against a newer version of Up.Time (such as 7.4), please use
25+
exploits/multi/http/uptime_file_upload_2.
2226
},
2327
'Author' =>
2428
[

0 commit comments

Comments
 (0)