CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

2 matches found

Rapid7 Vulnerability Database (full)•added 2019/08/23 12:00 a.m.•2 views

CVE-2019-15485: Improper Neutralization of Input During Web Page Generation

Bolt before 3.6.10 has XSS via createFolder or createFile in Controller/Async/FilesystemManager.php...

6.1CVSS7.8AI score0.00861EPSS

SaveExploits0References2

Rapid7 Vulnerability Database (full)•added 2019/03/07 12:00 a.m.•3 views

CVE-2019-9185: Unrestricted Upload of File with Dangerous Type

Controller/Async/FilesystemManager.php in the filemanager in Bolt before 3.6.5 allows remote attackers to execute arbitrary PHP code by renaming a previously uploaded file to have a .php extension...

8.8CVSS8.2AI score0.02661EPSS

SaveExploits1References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by