PT-2015-5046 · Adaptcms · Adaptcms

Gjoko Krstic · Published 2015-01-16 · Updated 2017-09-08 · CVE-2015-1059

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions AdaptCMS version 3.0.3

Description The issue allows remote authenticated users to execute arbitrary PHP code by uploading a file with a PHP extension to the "admin/files/add" endpoint, and then accessing it via a direct request to the file in /app/webroot/uploads.

Recommendations For AdaptCMS version 3.0.3, consider restricting access to the "admin/files/add" endpoint to prevent unauthorized file uploads, and remove or restrict execution of PHP files in the /app/webroot/uploads directory until a fix is available.

Exploit

Fix

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2015-1059

Affected Products

Adaptcms

References · 7

• 🔥 http://packetstormsecurity.com/files/129814/AdaptCMS-3.0.3-Remote-Command-Execution.html · Exploit
• 🔥 http://exploit-db.com/exploits/35710 · Exploit
• 🔥 http://zeroscience.mk/en/vulnerabilities/ZSL-2015-5220.php · Exploit
• 🔥 https://exploit-db.com/exploits/35710 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2015-1059 · Security Note
• http://osvdb.org/show/osvdb/116722 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/99616 · Note