PT-2023-10266 · Upthemes · Designfolio Plus

Crashbandicot · Published 2023-03-07 · Updated 2024-08-06 · CVE-2015-10087

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions UpThemes Theme DesignFolio Plus version 1.2

Description A vulnerability has been found in the software, classified as problematic, which affects an unknown functionality and leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

Recommendations Apply a patch to fix this issue. Note: Since the product is no longer supported by the maintainer, there might not be an official patch available.

Exploit

Fix

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

CVE-2015-10087

Affected Products

Designfolio Plus

References · 10

• 🔥 https://github.com/CCrashBandicot/exploit/commit/53f6ae62878076f99718e5feb589928e83c879a9 · Exploit
• 🔥 https://exploit-db.com/exploits/36372 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2015-10087 · Security Note
• https://t.me/cvenotify/89368 · Telegram Post
• https://vuldb.com/?ctiid.221809 · Note
• https://t.me/cvenotify/45748 · Telegram Post
• https://t.me/cvenotify/64325 · Telegram Post
• https://vuldb.com/?id.221809 · Note
• https://t.me/cibsecurity/59580 · Telegram Post
• https://support.alertlogic.com/hc/en-us/articles/360028203692-WordPress-Theme-DesignFolio-Plus-1-2-upload-file-php-Arbitrary-File-Upload · Note