CVE-2015-3203

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Unrestricted file upload vulnerability in h5ai before 0.25.0 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in the directory specified by the href parameter.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://larsjung.de/h5ai/cve-2015-3203.txtVendor Advisory
https://www.exploit-db.com/exploits/38256/Exploit
https://larsjung.de/h5ai/cve-2015-3203.txtVendor Advisory
https://www.exploit-db.com/exploits/38256/Exploit

Timeline

Published: Sep 28, 2015
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2015

CVE-2015-32045.0libreswan 3.9 through 3.12 allows remote attackers to cause a denial of service (daemon restart) via an IKEv1 packet with (1) unassigned bit CVE-2015-32057.5libmimedir allows remote attackers to execute arbitrary code via a VCF file with two NULL bytes at the end of the file, related to "free" fu CVE-2015-32068.1The checkPassword function in python-kerberos does not authenticate the KDC it attempts to communicate with, which allows remote attackers t CVE-2015-32075.3In Openshift Origin 3 the cookies being set in console have no 'secure', 'HttpOnly' attributes.CVE-2015-32097.5Heap-based buffer overflow in the PCNET controller in QEMU allows remote attackers to execute arbitrary code by sending a packet with TXSTAT CVE-2015-32109.8Heap-based buffer overflow in PCRE 8.34 through 8.37 and PCRE2 10.10 allows remote attackers to execute arbitrary code via a crafted regular CVE-2015-32115.5php-fpm allows local users to write to or create arbitrary files via a symlink attack.CVE-2015-32124.9Race condition in net/sctp/socket.c in the Linux kernel before 4.1.2 allows local users to cause a denial of service (list corruption and pa CVE-2015-32137.2The gesture handling code in Clutter before 1.16.2 allows physically proximate attackers to bypass the lock screen via certain (1) mouse or CVE-2015-32146.9The pit_ioport_read in i8254.c in the Linux kernel before 2.6.33 and QEMU before 2.3.1 does not distinguish between read lengths and write l CVE-2015-32157.5The NetKVM Windows Virtio driver allows remote attackers to cause a denial of service (guest crash) via a crafted length value in an IP pack CVE-2015-32164.3Race condition in a certain Red Hat patch to the PRNG lock implementation in the ssleay_rand_bytes function in OpenSSL, as distributed in op