Wolf CMS 'FileManagerController.php' Arbitrary File Upload Vulnerability
BID:74209
Info
Wolf CMS 'FileManagerController.php' Arbitrary File Upload Vulnerability
| Bugtraq ID: | 74209 |
| Class: | Design Error |
| CVE: |
CVE-2015-6567 CVE-2015-6568 |
| Remote: | Yes |
| Local: | No |
| Published: | Apr 17 2015 12:00AM |
| Updated: | Jul 06 2016 03:06PM |
| Credit: | ZeQ3uL, JabAv0C, p3lo, Sh0ck, BAD $ectors, Snapter, Conan, Win7dos, Gdiupo, GnuKDE, JK, Retool2 |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
Wolf CMS 'FileManagerController.php' Arbitrary File Upload Vulnerability
Wolf CMS is prone to an arbitrary-file-upload vulnerability.
An attacker may leverage this issue to upload arbitrary files to the affected computer; this can result in arbitrary code execution within the context of the vulnerable application.
Wolf CMS 0.8.2 is vulnerable; other versions may also be affected.
Wolf CMS is prone to an arbitrary-file-upload vulnerability.
An attacker may leverage this issue to upload arbitrary files to the affected computer; this can result in arbitrary code execution within the context of the vulnerable application.
Wolf CMS 0.8.2 is vulnerable; other versions may also be affected.
Exploit / POC
Wolf CMS 'FileManagerController.php' Arbitrary File Upload Vulnerability
Attackers can use standard commands to exploit this issue.
Attackers can use standard commands to exploit this issue.
Solution / Fix
Wolf CMS 'FileManagerController.php' Arbitrary File Upload Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Wolf CMS 'FileManagerController.php' Arbitrary File Upload Vulnerability
References:
References:
- Wolf CMS Homepage (Wolf CMS)