CVE-2015-6567

Published: 2017-04-14T16:59Z

Last Modified: 2024-11-21T02:35Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

Wolf CMS before 0.8.3.1 allows unrestricted file upload and PHP Code Execution because admin/plugin/file_manager/browse/ (aka the filemanager) does not validate the parameter "filename" properly. Exploitation requires a registered user who has access to upload functionality. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt