CVE

Id
78648  
CVE No.
CVE-2015-1371  
Status
Candidate  
Description
Unrestricted file upload vulnerability in ferretCMS 1.0.4-alpha allows remote administrators to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in custom/uploads/.  
Phase
Assigned (20150127)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
718224 78648 CVE-2015-1371 FULLDISC:20150122 Multiple stored/reflecting XSS- and SQLi-vulnerabilities and unrestricted file-upload in ferretCMS v. 1.0.4-alpha  View
718225 78648 CVE-2015-1371 URL:http://seclists.org/fulldisclosure/2015/Jan/98  View
718226 78648 CVE-2015-1371 MLIST:[oss-security] 20150123 CVE-Request -- ferretCMS v.1.0.4-alpha -- Multiple reflecting/stored XSS- and SQLi-vulnerabilities, unrestricted file upload  View
718227 78648 CVE-2015-1371 URL:http://www.openwall.com/lists/oss-security/2015/01/23/3  View
718228 78648 CVE-2015-1371 MISC:http://sroesemann.blogspot.de/2015/01/report-for-advisory-sroeadv-2015-10.html  View
718229 78648 CVE-2015-1371 CONFIRM:https://github.com/JRogaishio/ferretCMS/issues/63  View
718230 78648 CVE-2015-1371 BID:72287  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
5946 JVNDB-2015-001266 Gecko CMS における SQL インジェクションの脆弱性 Gecko CMS には、SQL インジェクションの脆弱性が存在します。 CVE-2015-1423 78648 6.5 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-001266.html  View