Magento Bug Bounty #19 - Persistent Filename Vulnerability

Document Title: =============== Magento Bug Bounty 19 - Persistent Filename Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1570 ID: APPSEC-1059 Release Date: ============= 2015-09-11 Vulnerability Laboratory ID VL-ID:...

CVE-2015-1059

CVE-2015-1059 affects AdaptCMS 3.0.3 and is an unrestricted file upload vulnerability in admin/files/add that permits authenticated users to upload PHP scripts and execute arbitrary code by requesting the uploaded file from /app/webroot/uploads. The root cause is improper verification of uploaded...