CVE-2015-1371

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

8.06%

Published

Jan 27, 2015

Modified

May 6, 2026

Public PoC / Exploit (1)

All weaponized →

Exploit-DBferretCMS 1.0.4-alpha - Multiple Vulnerabilities

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Unrestricted file upload vulnerability in ferretCMS 1.0.4-alpha allows remote administrators to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in custom/uploads/.

Weaknesses (CWE)

CWE-20

Affected Products (1)

ferretcms_project · ferretcmsvulnerable

References (10)

http://seclists.org/fulldisclosure/2015/Jan/98

Exploit

http://sroesemann.blogspot.de/2015/01/report-for-advisory-sroeadv-2015-10.html

Exploit

http://www.openwall.com/lists/oss-security/2015/01/23/3

Exploit

http://www.securityfocus.com/bid/72287

https://github.com/JRogaishio/ferretCMS/issues/63

http://seclists.org/fulldisclosure/2015/Jan/98

Exploit

http://sroesemann.blogspot.de/2015/01/report-for-advisory-sroeadv-2015-10.html

Exploit

http://www.openwall.com/lists/oss-security/2015/01/23/3

Exploit

http://www.securityfocus.com/bid/72287

https://github.com/JRogaishio/ferretCMS/issues/63

KEV Catalog EPSS Scores Vendors All CVEs