Facebook Google Plus Twitter LinkedIn YouTube RSS Menu Search Resource - BlogResource - WebinarResource - ReportResource - Eventicons_066 icons_067icons_068icons_069icons_070

GreyMatter gm-upload.cgi Arbitrary File Upload



The remote host is vulnerable to a Script Injection attack.


The remote host is running Greymatter, a log and journal application. This version of Greymatter is vulnerable to a flaw where an attacker can upload and execute arbitrary code with the rights of the web server. Successful exploitation would lead to the attacker executing arbitrary code that would impact confidentiality, integrity and availability.


Upgrade or patch according to vendor recommendations.