CVE-2015-1059

Unrestricted file upload vulnerability in admin/files/add in AdaptCMS 3.0.3 allows remote authenticated users to execute arbitrary PHP code by uploading a file…

published January 16, 2015

CVSS
—
EPSS
5%
Percentile
92.7
In the wild
Unconfirmed
What it is

Unrestricted file upload vulnerability in admin/files/add in AdaptCMS 3.0.3 allows remote authenticated users to execute arbitrary PHP code by uploading a file with a PHP extension, then accessing it via a direct request to the file in /app/webroot/uploads.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05427 · 92.7th percentile
Published
2015-01-16T15:00Z
EPSS history
Timeline
  • 16 JAN 15:00Z
    Unrestricted file upload vulnerability in admin/files/add in AdaptCMS 3.0.3 allows remote authenticated users to execute arbitrary PHP code by uploading a file…
    cvelistv5