{"uuid": "9d90b43b-be82-411c-bb9d-741a8d81b1f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2014-125126", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/simple_e_document_upload_exec.rb", "content": "{\"aliases\": [], \"arch\": \"php\", \"author\": [\"vinicius777 \", \"bcoles \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits a file upload vulnerability found in Simple\\n          E-Document versions 3.0 to 3.1. Attackers can bypass authentication and\\n          abuse the upload feature in order to upload malicious PHP files which\\n          results in arbitrary remote code execution as the web server user. File\\n          uploads are disabled by default.\", \"disclosure_date\": \"2014-01-23\", \"fullname\": \"exploit/unix/webapp/simple_e_document_upload_exec\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:59:12 +0000\", \"name\": \"Simple E-Document Arbitrary File Upload\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/unix/webapp/simple_e_document_upload_exec.rb\", \"platform\": \"PHP\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"unix/webapp/simple_e_document_upload_exec\", \"references\": [\"CVE-2014-125126\", \"EDB-31142\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"Generic (PHP Payload)\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:47.207523Z"}