NVD

Id
85241  
Name
CVE-2015-6567  
Description
Wolf CMS before 0.8.3.1 allows unrestricted file upload and PHP Code Execution because admin/plugin/file_manager/browse/ (aka the filemanager) does not validate the parameter "filename" properly. Exploitation requires a registered user who has access to upload functionality.  
Reject
 
CVSS Version
2  
CVSS Score
6.5  
Severity
Medium  
CVSS Base Score
6.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:P/I:P/A:P)  
Pub Date
2017-04-27  
Published
2017-04-14  
Modified Date
2017-04-21  
Seq
2015-6567  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
415650 85241 CVE-2016-10271 https://blogs.gentoo.org/ago/2017/01/01/libtiff-multiple-heap-based-buffer-overflow/  View
415651 85241 CVE-2016-10271 https://github.com/vadz/libtiff/commit/9657bbe3cdce4aaa90e07d50c1c70ae52da0ba6a  View
415652 85241 CVE-2016-10271 https://blogs.gentoo.org/ago/2017/01/01/libtiff-multiple-heap-based-buffer-overflow/  View
415653 85241 CVE-2016-10271 https://github.com/vadz/libtiff/commit/9657bbe3cdce4aaa90e07d50c1c70ae52da0ba6a  View
418407 85241 CVE-2017-3581 http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html  View
418408 85241 CVE-2017-3581 97802  View
418409 85241 CVE-2017-3581 http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html  View
418410 85241 CVE-2017-3581 97802  View

Related JVN