Earcms Application Distribution System Unrestricted File Upload Scanner
Targets file upload endpoints in Earcms, allowing attackers to upload and execute arbitrary files on the server.
Short Info
Level
Single Scan
Single Scan
Can be used by
Asset Owner
Estimated Time
10 seconds
Time Interval
2 days 7 hours
Scan only one
Domain, Subdomain, IPv4
Toolbox
Earcms Application Distribution System is a platform used by developers and enterprises to manage and distribute web applications across multiple environments. It streamlines version control, updates, and deployment processes, making it essential for efficient application delivery in modern IT infrastructures.
Unrestricted File Upload vulnerability occurs when the system fails to properly validate or restrict the types of files that can be uploaded. This arises from insufficient input validation, allowing attackers to bypass security checks and upload malicious files such as web shells or executables.
Specifically, the vulnerability targets the file upload functionality in Earcms, often through parameters like 'file' or 'upload' in POST requests. The system does not enforce strict file type whitelisting or content inspection, enabling attackers to upload files with dangerous extensions like .php, .asp, or .jsp.
If exploited, an attacker can execute arbitrary code on the server, leading to full system compromise, data theft, or further lateral movement within the network. This can result in severe data breaches, service disruption, and reputational damage for the organization.