Lucene search
MitreCVELIST:CVE-2015-7309HistorySep 22, 2015 - 3:00 p.m.
CVE-2015-7309
2015-09-2215:00:00
mitre
www.cve.org
3
bolt
theme editor
remote code execution
file renaming
cve-2015-7309
The theme editor in Bolt before 2.2.5 does not check the file extension when renaming files, which allows remote authenticated users to execute arbitrary code by renaming a crafted file and then directly accessing it.
References
Related
exploitdb
exploitdb
CMS Bolt - Arbitrary File Upload (Metasploit)
2015-09-15 00:00:00
cve
cve
CVE-2015-7309
2015-09-22 15:59:02
prion
prion
Code injection
2015-09-22 15:59:00
veracode
veracode
Arbitrary Code Execution
2017-07-29 01:50:51
cbl_mariner
cbl_mariner
CVE-2015-7309 affecting package bolt 0.9.2-2
2024-09-21 03:20:41
nvd
nvd
CVE-2015-7309
2015-09-22 15:59:02
metasploit
metasploit
CMS Bolt File Upload Vulnerability
2015-09-09 16:41:44
rosalinux
rosalinux
Advisory ROSA-SA-2021-1809
2021-07-02 16:34:28