CVE-2017-11611

CVE-2017-11611 affects Wolf CMS 0.8.3.1. The flaw is an XSS vulnerability arising from insufficient sanitization of user-supplied names in the file manager: specifically the file name in the create-file-popup action and the directory name in the create-directory-popup action, transmitted via HTTP...

Wolf CMS both the old and new version of the file upload vulnerability analysis-vulnerability warning-the black bar safety net

A Wolfcms description Wolf CMS is a Content Management System CMS, is in the GNUGeneral Public License v3 released under the free software. Wolf CMS is made in PHP language, is Frog CMS a branch. In 2010, Packet Publishing open source projects, the award of“Most Promising Open Source...

Arbitrary File Write Vulnerability in Wolf CMS 0.8.3.1 Backend

Wolf CMS is a lightweight CMS program written in PHP. The latest version of Wolf CMS, version 0.8.3.1, has an arbitrary file write vulnerability in the backend, which can be exploited to create files with arbitrary suffixes and write arbitrary content. An attacker can use this vulnerability to...

DEBIAN-CVE-2017-8855

wolfSSL before 3.11.0 does not prevent wcDhAgree from accepting a malformed DH key...

CVE-2015-6568

Wolf CMS before 0.8.3.1 allows unrestricted file rename and PHP Code Execution because admin/plugin/filemanager/browse/ aka the filemanager does not prevent a change of a file extension to ".php" after originally using the parameter "filename" for uploading a JPEG image. Exploitation requires a...

Unrestricted file upload

Wolf CMS before 0.8.3.1 allows unrestricted file upload and PHP Code Execution because admin/plugin/filemanager/browse/ aka the filemanager does not validate the parameter "filename" properly. Exploitation requires a registered user who has access to upload functionality...

CVE-2015-6567

Wolf CMS before 0.8.3.1 allows unrestricted file upload and PHP Code Execution because admin/plugin/filemanager/browse/ aka the filemanager does not validate the parameter "filename" properly. Exploitation requires a registered user who has access to upload functionality...

Unrestricted file upload

Wolf CMS before 0.8.3.1 allows unrestricted file rename and PHP Code Execution because admin/plugin/filemanager/browse/ aka the filemanager does not prevent a change of a file extension to ".php" after originally using the parameter "filename" for uploading a JPEG image. Exploitation requires a...

CVE-2015-6567

Wolf CMS before 0.8.3.1 allows unrestricted file upload and PHP Code Execution because admin/plugin/filemanager/browse/ aka the filemanager does not validate the parameter "filename" properly. Exploitation requires a registered user who has access to upload functionality...

CVE-2015-6568

Wolf CMS before 0.8.3.1 allows unrestricted file rename and PHP Code Execution because admin/plugin/filemanager/browse/ aka the filemanager does not prevent a change of a file extension to ".php" after originally using the parameter "filename" for uploading a JPEG image. Exploitation requires a...

CVE-2015-6567

CVE-2015-6567 affects Wolf CMS prior to 0.8.3.1. The vulnerability arises in admin/plugin/file_manager/browse (the file manager) where the filename parameter is not properly validated, enabling an authenticated user with upload rights to upload arbitrary files and potentially execute PHP code on ...

CVE-2015-6568

Wolf CMS before 0.8.3.1 is vulnerable to an unrestricted file upload that allows changing a file’s extension to .php via admin/plugin/file_manager/browse/, enabling PHP code execution. Exploitation requires a registered user with upload access. The issue is addressed in Wolf CMS 0.8.3.1 (release ...

Wolf CMS 0.8 Cross Site Scripting

Title Wolf CMS 0.8 - Stored Cross-Site Scripting XSS Vulnerability + Credit Mattia Reggiani [email protected] + Advisory https://github.com/mattiareggiani/Security-Advisories/blob/master/MR-16-03WolfCMS.pdf + Vendor Homepage https://www.wolfcms.org/ + Affected Version 0.8 + Tested on Ubuntu...

Wolf CMS Stored Cross-Site Scripting Vulnerability

Wolf CMS is a PHP-based open source content management system CMS developed by the Wolf CMS team. The system provides user interface , templates , user management and rights management and other functions . A stored cross-site scripting vulnerability exists in Wolf CMS version 0.8, which stems fr...

Wolf CMS Cross-Site Scripting Vulnerability (CNVD-2016-05085)

Wolf CMS is a PHP-based open source content management system CMS developed by the Wolf CMS team. A cross-site scripting vulnerability exists in Wolf CMS version 0.8.3.1, which can be exploited by attackers to execute arbitrary script code, steal cookie-based authentication and launch other attac...

Wolf CMS Metasploit Module Arbitrary File Upload Vulnerability

Wolf CMS is a content management system CMS.Metasploit is one of the security vulnerability detection tool components. An arbitrary file upload vulnerability exists in the Metasploit module of Wolf CMS version 0.8.2. An attacker can use this vulnerability to upload arbitrary files to the /public...

Wolf CMS Metasploit module arbitrary file upload vulnerability (CNVD-2016-04300)

Wolf CMS is a content management system CMS.Metasploit is one of the security vulnerability detection tool components. An arbitrary file upload vulnerability exists in the Metasploit module of Wolf CMS version 0.8.2. An attacker can use this vulnerability to upload arbitrary files to the /public...

Wolf CMS 0.8.2 - Arbitrary File Upload (Metasploit)

Wolf CMS 0.8.2 - Arbitrary File Upload Metasploit This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class MetasploitModule 'Wolfcms 0.8.2 Arbitrary PHP File Upload Vulnerability', 'Description' = %q Th...

Wolf CMS 0.8.2 Arbitrary PHP File Upload

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class MetasploitModule 'Wolfcms 0.8.2 Arbitrary PHP File Upload Vulnerability', 'Description' = %q This module exploits a file upload vulnerability in...

Wolf CMS 0.8.2 - Arbitrary File Upload (Metasploit)

Exploit for php platform in category remote exploits This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class MetasploitModule 'Wolfcms 0.8.2 Arbitrary PHP File Upload Vulnerability', 'Description' = %q...