Lucene search
K

Bolt Arbitrary Code Execution Vulnerability

🗓️ 27 Sep 2015 00:00:00Reported by China National Vulnerability DatabaseType 
cnvd
 cnvd
🔗 www.cnvd.org.cn👁 2 Views

Bolt theme editor permits remote code execution due to missing extension check during file rename.

Related
Detection
Refs
ReporterTitlePublishedViews
Family
CBLMariner
CVE-2015-7309 affecting package bolt 0.9.2-2
12 Jan 202509:15
cbl_mariner
Circl
CVE-2015-7309
15 Sep 201500:00
circl
CVE
CVE-2015-7309
22 Sep 201515:00
cve
Cvelist
CVE-2015-7309
22 Sep 201515:00
cvelist
Microsoft CVE
The theme editor in Bolt allows remote authenticated users to execute arbitrary code by renaming a crafted file
1 Oct 202523:10
mscve
Metasploit
CMS Bolt File Upload Vulnerability
9 Sep 201516:41
metasploit
NVD
CVE-2015-7309
22 Sep 201515:59
nvd
Prion
Code injection
22 Sep 201515:59
prion
RedhatCVE
CVE-2015-7309
22 May 202503:14
redhatcve
Rosalinux
Advisory ROSA-SA-2021-1809
2 Jul 202116:34
rosalinux
Rows per page
Vulners
Node
boltbolt_cmsMatch2.2.5

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

09 Oct 2015 00:00Current
7.9High risk
Vulners AI Score7.9
CVSS 26.5
EPSS0.38611
2