Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2015-6527 State: PUBLISHED Published: 2016-01-19T02:00:00 Last Updated: 2024-08-06T07:22:22.215Z Vendors: n/a Products: n/a Problem Types: n/a Description: The php_str_replace_in_subject function in ext/standard/string.c in PHP 7.x before 7.0.0 allows remote attackers to execute arbitrary code via a crafted value in the third argument to the str_ireplace function. Additional Analyst Notes: - CVE Program Container: References: - http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=6aeee47b2cd47915ccfa3b41433a3f57aea24dd5 - http://www.openwall.com/lists/oss-security/2015/07/30/11 - https://bugs.php.net/bug.php?id=70140
CVE ID: CVE-2015-6528 State: PUBLISHED Published: 2015-08-20T20:00:00Z Last Updated: 2024-09-17T01:07:09.166Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in install_classic.php in Coppermine Photo Gallery (CPG) 1.5.36 allow remote attackers to inject arbitrary web script or HTML via the (1) admin_username, (2) admin_password, (3) admin_email, (4) dbserver, (5) dbname, (6) dbuser, (7) dbpass, (8) table_prefix, or (9) impath parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/133059/Coppermine-Photo-Gallery-1.5.36-Cross-Site-Scripting.html
CVE ID: CVE-2015-6529 State: PUBLISHED Published: 2015-08-20T20:00:00 Last Updated: 2024-08-06T07:22:22.265Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in phpipam 1.1.010 allow remote attackers to inject arbitrary web script or HTML via the (1) section parameter to site/error.php or (2) ip parameter to site/tools/searchResults.php. Additional Analyst Notes: - CVE Program Container: References: - http://hyp3rlinx.altervista.org/advisories/AS-PHPIPAM0812.txt - http://packetstormsecurity.com/files/133055/phpipam-1.1.010-Cross-Site-Scripting.html - http://www.securityfocus.com/archive/1/536188/100/0/threaded
CVE ID: CVE-2015-6530 State: PUBLISHED Published: 2015-08-20T20:00:00 Last Updated: 2024-08-06T07:22:22.258Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in OpenText Secure MFT 2013 before 2013 R3 P6 and 2014 before 2014 R2 P2 allows remote attackers to inject arbitrary web script or HTML via the querytext parameter to userdashboard.jsp. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/133247/OpenText-Secure-MFT-2014-R2-SP4-Cross-Site-Scripting.html - https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2015-041.txt - http://www.securityfocus.com/archive/1/536260/100/0
.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2015-041.txt - http://www.securityfocus.com/archive/1/536260/100/0/threaded
CVE ID: CVE-2015-6531 State: PUBLISHED Published: 2017-06-01T16:00:00 Last Updated: 2024-08-06T07:22:22.205Z Vendors: n/a Products: n/a Problem Types: n/a Description: Palo Alto Networks Panorama VM Appliance with PAN-OS before 6.0.1 might allow remote attackers to execute arbitrary Python code via a crafted firmware image file. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/research/tra-2015-02 - http://www.securityfocus.com/bid/76862
CVE ID: CVE-2015-6535 State: PUBLISHED Published: 2015-08-31T18:00:00 Last Updated: 2024-08-06T07:22:22.281Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in includes/options-profiles.php in the YouTube Embed plugin before 3.3.3 for WordPress allows remote administrators to inject arbitrary web script or HTML via the Profile name field (youtube_embed_name parameter). Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/8163 - http://packetstormsecurity.com/files/133340/WordPress-YouTube-Embed-3.3.2-Cross-Site-Scripting.html - https://wordpress.org/plugins/youtube-embed/changelog/ - http://w
dPress-YouTube-Embed-3.3.2-Cross-Site-Scripting.html - https://wordpress.org/plugins/youtube-embed/changelog/ - http://www.securityfocus.com/archive/1/536334/100/0/threaded
CVE ID: CVE-2015-6537 State: PUBLISHED Published: 2015-12-27T19:00:00 Last Updated: 2024-08-06T07:22:22.209Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the login page in Epiphany Cardio Server 3.3 allows remote attackers to execute arbitrary SQL commands via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.epiphanyhealthdata.com/blog/certresponse - https://www.kb.cert.org/vuls/id/630239
CVE ID: CVE-2015-6538 State: PUBLISHED Published: 2015-12-27T19:00:00 Last Updated: 2024-08-06T07:22:22.182Z Vendors: n/a Products: n/a Problem Types: n/a Description: The login page in Epiphany Cardio Server 3.3, 4.0, and 4.1 mishandles authentication requests, which allows remote attackers to conduct LDAP injection attacks, and consequently bypass intended access restrictions, via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.epiphanyhealthdata.com/blog/certresponse - https://www.kb.cert.org/vuls/id/630239
CVE ID: CVE-2015-6540 State: PUBLISHED Published: 2017-06-07T20:00:00 Last Updated: 2024-08-06T07:22:22.255Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Intellect Design Arena Intellect Core banking software. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/134767/Intellect-Core-Cross-Site-Scripting.html - http://www.securityfocus.com/archive/1/537068/100/0/threaded
CVE ID: CVE-2015-6541 State: PUBLISHED Published: 2016-04-08T14:00:00 Last Updated: 2024-08-06T07:22:22.185Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in the Mail interface in Zimbra Collaboration Server (ZCS) before 8.5 allow remote attackers to hijack the authentication of arbitrary users for requests that change account preferences via a SOAP request to service/soap/BatchRequest. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.zimbra.com/wiki/Security/Collab/86#Notes_from_8.5_.28Jetty.29 - http://seclists.org/fulldisclosure/2016/Feb/121 - https://www.exploit-db.com/exploits/39500/
CVE ID: CVE-2015-6542 State: REJECTED Published: 2017-05-12T14:00:00 Last Updated: 2017-05-12T12:57:01 Description: No description available.
CVE ID: CVE-2015-6544 State: PUBLISHED Published: 2018-02-20T20:00:00 Last Updated: 2024-08-06T07:22:22.370Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in application/dashboard.class.inc.php in Combodo iTop before 2.2.0-2459 allows remote attackers to inject arbitrary web script or HTML via a dashboard title. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/p/itop/code/3662/ - https://www.htbridge.com/advisory/HTB23268 - http://sourceforge.net/p/itop/tickets/1114/
CVE ID: CVE-2015-6545 State: PUBLISHED Published: 2015-09-03T17:00:00 Last Updated: 2024-08-06T07:22:22.267Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in ajax.php in Cerb before 7.0.4 allows remote attackers to hijack the authentication of administrators for requests that add an administrator account via a saveWorkerPeek action. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/133404/Cerb-7.0.3-Cross-Site-Request-Forgery.html - https://github.com/wgm/cerb/commit/12de87ff9961a4f3ad2946c8f47dd0c260607144 - http://www.securityfocus.com/archive/1/536376/100/0/threaded - https://w
mmit/12de87ff9961a4f3ad2946c8f47dd0c260607144 - http://www.securityfocus.com/archive/1/536376/100/0/threaded - https://www.htbridge.com/advisory/HTB23269 - https://www.exploit-db.com/exploits/38074/ - http://wiki.cerbweb.com/7.0#7.0.4
CVE ID: CVE-2015-6546 State: PUBLISHED Published: 2015-11-06T18:00:00 Last Updated: 2024-08-06T07:22:22.257Z Vendors: n/a Products: n/a Problem Types: n/a Description: The vCMP host in F5 BIG-IP Analytics, APM, ASM, GTM, Link Controller, and LTM 11.0.0 before 11.6.0, BIG-IP AAM 11.4.0 before 11.6.0, BIG-IP AFM and PEM 11.3.0 before 11.6.0, BIG-IP Edge Gateway, WebAccelerator, and WOM 11.0.0 through 11.3.0, BIG-IP PSM 11.0.0 through 11.4.1 allows remote attackers to cause a denial of service via "malicious traffic." Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1033952 - https://support.f5.com/kb/en-us/solutions/public/17000/300/sol17386.ht
es: - http://www.securitytracker.com/id/1033952 - https://support.f5.com/kb/en-us/solutions/public/17000/300/sol17386.html
CVE ID: CVE-2015-6547 State: PUBLISHED Published: 2015-09-20T20:00:00 Last Updated: 2024-08-06T07:22:22.249Z Vendors: n/a Products: n/a Problem Types: n/a Description: The management console on Symantec Web Gateway (SWG) appliances with software before 5.2.2 DB 5.0.0.1277 allows remote authenticated users to execute arbitrary commands at boot time via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1033625 - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20150916_00 - http://www.securityfocus.com/bid/76730
CVE ID: CVE-2015-6548 State: PUBLISHED Published: 2015-09-20T20:00:00 Last Updated: 2024-08-06T07:22:22.248Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in a PHP script in the management console on Symantec Web Gateway (SWG) appliances with software before 5.2.2 DB 5.0.0.1277 allow remote authenticated users to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1033625 - http://www.securityfocus.com/bid/76729 - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20
www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20150916_00
CVE ID: CVE-2015-6549 State: PUBLISHED Published: 2015-10-03T10:00:00 Last Updated: 2024-08-06T07:22:22.424Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in an application console in the server in Symantec NetBackup OpsCenter before 7.7.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20151001_00 - http://www.securitytracker.com/id/1033726 - http://www.securityfocus.com/bid/76896
CVE ID: CVE-2015-6550 State: PUBLISHED Published: 2016-05-07T14:00:00 Last Updated: 2024-08-06T07:22:22.359Z Vendors: n/a Products: n/a Problem Types: n/a Description: bpcd in Veritas NetBackup 7.x through 7.5.0.7, 7.6.0.x through 7.6.0.4, 7.6.1.x through 7.6.1.2, and 7.7.x before 7.7.2 and NetBackup Appliance through 2.5.4, 2.6.0.x through 2.6.0.4, 2.6.1.x through 2.6.1.2, and 2.7.x before 2.7.2 allows remote attackers to execute arbitrary commands via crafted input. Additional Analyst Notes: - CVE Program Container: References: - https://www.veritas.com/content/support/en_US/security/VTS16-001.html - http://www.securitytracker.com/id/1035704
CVE ID: CVE-2015-6551 State: PUBLISHED Published: 2016-05-07T14:00:00 Last Updated: 2024-08-06T07:22:22.172Z Vendors: n/a Products: n/a Problem Types: n/a Description: Veritas NetBackup 7.x through 7.5.0.7 and 7.6.0.x through 7.6.0.4 and NetBackup Appliance through 2.5.4 and 2.6.0.x through 2.6.0.4 do not use TLS for administration-console traffic to the NBU server, which allows remote attackers to obtain sensitive information by sniffing the network for key-exchange packets. Additional Analyst Notes: - CVE Program Container: References: - https://www.veritas.com/content/support/en_US/security/VTS16-001.html - http://www.securitytracker.com/id/1035704
CVE ID: CVE-2015-6552 State: PUBLISHED Published: 2016-05-07T14:00:00 Last Updated: 2024-08-06T07:22:22.209Z Vendors: n/a Products: n/a Problem Types: n/a Description: The management-services protocol implementation in Veritas NetBackup 7.x through 7.5.0.7, 7.6.0.x through 7.6.0.4, 7.6.1.x through 7.6.1.2, and 7.7.x before 7.7.2 and NetBackup Appliance through 2.5.4, 2.6.0.x through 2.6.0.4, 2.6.1.x through 2.6.1.2, and 2.7.x before 2.7.2 allows remote attackers to make arbitrary RPC calls via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.veritas.com/content/support/en_US/security/VTS16-001.html - http://www.securitytracker.com/id/1035704
CVE ID: CVE-2015-6553 State: REJECTED Published: 2016-02-05T18:00:00 Last Updated: 2016-02-05T17:57:01 Description: No description available.
CVE ID: CVE-2015-6554 State: PUBLISHED Published: 2015-11-12T02:00:00 Last Updated: 2024-08-06T07:22:22.239Z Vendors: n/a Products: n/a Problem Types: n/a Description: Symantec Endpoint Protection Manager (SEPM) 12.1 before 12.1-RU6-MP3 allows remote attackers to execute arbitrary OS commands via crafted data. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/77494 - http://www.securitytracker.com/id/1034139 - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20151109_00
CVE ID: CVE-2015-6555 State: PUBLISHED Published: 2015-11-12T02:00:00 Last Updated: 2024-08-06T07:22:22.226Z Vendors: n/a Products: n/a Problem Types: n/a Description: Symantec Endpoint Protection Manager (SEPM) 12.1 before 12.1-RU6-MP3 allows remote attackers to execute arbitrary Java code by connecting to the console Java port. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/77495 - http://www.securitytracker.com/id/1034139 - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20151109_00
CVE ID: CVE-2015-6556 State: PUBLISHED Published: 2015-12-18T11:00:00 Last Updated: 2024-08-06T07:22:22.439Z Vendors: n/a Products: n/a Problem Types: n/a Description: EACommunicatorSrv.exe in the Framework Service in the client in Symantec Endpoint Encryption (SEE) before 11.1.0 allows remote authenticated users to discover credentials by triggering a memory dump. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/78803 - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20151214_00
CVE ID: CVE-2015-6557 State: PUBLISHED Published: 2015-08-23T01:00:00 Last Updated: 2024-08-06T07:22:22.396Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Tivoli Storage Manager for Databases: Data Protection for Microsoft SQL Server 5.5 before 5.5.6.1, 6.3 before 6.3.1.5, 6.4 before 6.4.1.7, and 7.1 before 7.1.2; Tivoli Storage Manager for Mail: Data Protection for Microsoft Exchange Server 5.5 before 5.5.1.1, 6.1 before 6.1.3.7, 6.3 before 6.3.1.5, 6.4 before 6.4.1.7, and 7.1 before 7.1.2; and Tivoli Storage FlashCopy Manager 3.1 before 3.1.1.5, 3.2 before 3.2.1.7, and 4.1 before 4.1.2, when application tracing is used, place cleartext passwords in exception messages, whic
e 3.2.1.7, and 4.1 before 4.1.2, when application tracing is used, place cleartext passwords in exception messages, which allows physically proximate attackers to obtain sensitive information by reading trace output, a different vulnerability than CVE-2015-4949. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1IT03480 - http://www-01.ibm.com/support/docview.wss?uid=swg21963630
CVE ID: CVE-2015-6563 State: PUBLISHED Published: 2015-08-24T00:00:00 Last Updated: 2024-08-06T07:22:22.366Z Vendors: n/a Products: n/a Problem Types: n/a Description: The monitor component in sshd in OpenSSH before 7.0 on non-OpenBSD platforms accepts extraneous username data in MONITOR_REQ_PAM_INIT_CTX requests, which allows local users to conduct impersonation attacks by leveraging any SSH login access in conjunction with control of the sshd uid to send a crafted MONITOR_REQ_PWNAM request, related to monitor.c and monitor_wrap.c. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2015/08/22/1 - http://lists.fedoraproject.org/piperma
ontainer: References: - http://www.openwall.com/lists/oss-security/2015/08/22/1 - http://lists.fedoraproject.org/pipermail/package-announce/2015-August/165170.html - http://lists.apple.com/archives/security-announce/2015/Oct/msg00005.html - https://support.apple.com/HT205375 - http://www.securityfocus.com/bid/76317 - https://github.com/openssh/openssh-portable/commit/d4697fe9a28dab7255c60433e4dd23cf7fce8a8b - http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html - https://security.gentoo.org/glsa/201512-04 - http://www.openssh.com/txt/release-7.0 - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html - http://rhn.redhat.com/errata/
.0 - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html - http://rhn.redhat.com/errata/RHSA-2016-0741.html - http://seclists.org/fulldisclosure/2015/Aug/54 - http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html - http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00017.html - https://lists.debian.org/debian-lts-announce/2018/09/msg00010.html - https://security.netapp.com/advisory/ntap-20180201-0002/ - https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2019-766 - https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf
CVE ID: CVE-2015-6564 State: PUBLISHED Published: 2015-08-24T00:00:00 Last Updated: 2024-08-06T07:22:22.183Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the mm_answer_pam_free_ctx function in monitor.c in sshd in OpenSSH before 7.0 on non-OpenBSD platforms might allow local users to gain privileges by leveraging control of the sshd uid to send an unexpectedly early MONITOR_REQ_PAM_FREE_CTX request. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2015/08/22/1 - http://lists.fedoraproject.org/pipermail/package-announce/2015-August/165170.html - http://www.securityfocus.com/bid/76317 - htt
ists.fedoraproject.org/pipermail/package-announce/2015-August/165170.html - http://www.securityfocus.com/bid/76317 - http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html - https://security.gentoo.org/glsa/201512-04 - https://kc.mcafee.com/corporate/index?page=content&id=SB10136 - http://www.openssh.com/txt/release-7.0 - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html - https://github.com/openssh/openssh-portable/commit/5e75f5198769056089fb06c4d738ab0e5abc66f7 - http://rhn.redhat.com/errata/RHSA-2016-0741.html - http://seclists.org/fulldisclosure/2015/Aug/54 - http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2
l - http://seclists.org/fulldisclosure/2015/Aug/54 - http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html - http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00017.html - https://lists.debian.org/debian-lts-announce/2018/09/msg00010.html - https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2019-764 - https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf
CVE ID: CVE-2015-6565 State: PUBLISHED Published: 2015-08-24T00:00:00 Last Updated: 2024-08-06T07:22:22.369Z Vendors: n/a Products: n/a Problem Types: n/a Description: sshd in OpenSSH 6.8 and 6.9 uses world-writable permissions for TTY devices, which allows local users to cause a denial of service (terminal disruption) or possibly have unspecified other impact by writing to a device, as demonstrated by writing an escape sequence. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2015/08/22/1 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05131085 - https://security.gentoo.org/glsa/201512-04 - http://
.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05131085 - https://security.gentoo.org/glsa/201512-04 - http://www.securitytracker.com/id/1033917 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150888 - http://www.openssh.com/txt/release-7.0 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158380 - https://www.exploit-db.com/exploits/41173/ - http://openwall.com/lists/oss-security/2017/01/26/2 - http://www.securityfocus.com/bid/76497 - https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf
CVE ID: CVE-2015-6566 State: PUBLISHED Published: 2016-01-11T15:00:00 Last Updated: 2024-08-06T07:22:22.283Z Vendors: n/a Products: n/a Problem Types: n/a Description: zarafa-autorespond in Zarafa Collaboration Platform (ZCP) before 7.2.1 allows local users to gain privileges via a symlink attack on /tmp/zarafa-vacation-*. Additional Analyst Notes: - CVE Program Container: References: - https://jira.zarafa.com/browse/ZCP-13572 - http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172605.html - https://jira.zarafa.com/browse/ZCP-13533 - https://download.zarafa.com/community/final/7.2/final-changelog-7.2.txt
CVE ID: CVE-2015-6567 State: PUBLISHED Published: 2017-04-14T16:00:00 Last Updated: 2024-08-06T07:22:22.422Z Vendors: n/a Products: n/a Problem Types: n/a Description: Wolf CMS before 0.8.3.1 allows unrestricted file upload and PHP Code Execution because admin/plugin/file_manager/browse/ (aka the filemanager) does not validate the parameter "filename" properly. Exploitation requires a registered user who has access to upload functionality. Additional Analyst Notes: - CVE Program Container: References: - http://www.websecgeeks.com/2015/08/wolf-cms-arbitrary-file-upload-to.html - https://github.com/wolfcms/wolfcms/issues/625 - https://github.com/wolfcms/wolfcms/releases/tag/0.8.3.1 - https://w
ml - https://github.com/wolfcms/wolfcms/issues/625 - https://github.com/wolfcms/wolfcms/releases/tag/0.8.3.1 - https://www.exploit-db.com/exploits/38000/ - https://www.exploit-db.com/exploits/40004/ - https://github.com/wolfcms/wolfcms/commit/2160275b60736f706dfda132c7c46728c5b255fa - https://www.wolfcms.org/blog/2015/08/10/releasing-wolf-cms-0-8-3-1.html
CVE ID: CVE-2015-6568 State: PUBLISHED Published: 2017-04-14T16:00:00 Last Updated: 2024-08-06T07:22:22.365Z Vendors: n/a Products: n/a Problem Types: n/a Description: Wolf CMS before 0.8.3.1 allows unrestricted file rename and PHP Code Execution because admin/plugin/file_manager/browse/ (aka the filemanager) does not prevent a change of a file extension to ".php" after originally using the parameter "filename" for uploading a JPEG image. Exploitation requires a registered user who has access to upload functionality. Additional Analyst Notes: - CVE Program Container: References: - http://www.websecgeeks.com/2015/08/wolf-cms-arbitrary-file-upload-to.html - https://github.com/wolfcms/wolfcms/i
nces: - http://www.websecgeeks.com/2015/08/wolf-cms-arbitrary-file-upload-to.html - https://github.com/wolfcms/wolfcms/issues/625 - https://github.com/wolfcms/wolfcms/releases/tag/0.8.3.1 - https://www.exploit-db.com/exploits/38000/ - https://www.exploit-db.com/exploits/40004/ - https://github.com/wolfcms/wolfcms/commit/2160275b60736f706dfda132c7c46728c5b255fa - https://www.wolfcms.org/blog/2015/08/10/releasing-wolf-cms-0-8-3-1.html