Lucene search
PRIOn knowledge basePRION:CVE-2015-6568HistoryApr 14, 2017 - 4:59 p.m.
Unrestricted file upload
2017-04-1416:59:00
PRIOn knowledge base
www.prio-n.com
4
Wolf CMS before 0.8.3.1 allows unrestricted file rename and PHP Code Execution because admin/plugin/file_manager/browse/ (aka the filemanager) does not prevent a change of a file extension to “.php” after originally using the parameter “filename” for uploading a JPEG image. Exploitation requires a registered user who has access to upload functionality.
References
www.websecgeeks.com/2015/08/wolf-cms-arbitrary-file-upload-to.html
github.com/wolfcms/wolfcms/commit/2160275b60736f706dfda132c7c46728c5b255fa
github.com/wolfcms/wolfcms/issues/625
github.com/wolfcms/wolfcms/releases/tag/0.8.3.1
www.exploit-db.com/exploits/38000/
www.exploit-db.com/exploits/40004/
www.wolfcms.org/blog/2015/08/10/releasing-wolf-cms-0-8-3-1.html
Related
cve
cve
CVE-2015-6568
2017-04-14 16:59:00
cvelist
cvelist
CVE-2015-6568
2017-04-14 16:00:00
nvd
nvd
CVE-2015-6568
2017-04-14 16:59:00
exploitpack
exploitpack
Wolf CMS - Arbitrary File Upload Execution
2015-08-28 00:00:00
zdt
zdt
Wolf CMS Arbitrary File Upload To Command Execution Exploit
2015-08-28 00:00:00
Wolf CMS 0.8.2 - Arbitrary File Upload (Metasploit)
2016-06-22 00:00:00
packetstorm
packetstorm
Wolf CMS 0.8.2 Arbitrary PHP File Upload
2016-06-22 00:00:00
exploitdb
exploitdb
Wolf CMS - Arbitrary File Upload / Execution
2015-08-28 00:00:00