CVE-2015-6567
HIGHWolfcms Wolf Cms < 0.8.3 - Improper Input Validation
Title source: ruleDescription
Wolf CMS before 0.8.3.1 allows unrestricted file upload and PHP Code Execution because admin/plugin/file_manager/browse/ (aka the filemanager) does not validate the parameter "filename" properly. Exploitation requires a registered user who has access to upload functionality.
Exploits (2)
References (7)
Scores
CVSS v3
8.8
EPSS
0.0588
EPSS Percentile
90.6%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-20
Status
published
Products (1)
wolfcms/wolf_cms
< 0.8.3
Published
Apr 14, 2017
Tracked Since
Feb 18, 2026