CVE-2015-6568

Wolf CMS before 0.8.3.1 allows unrestricted file rename and PHP Code Execution because admin/plugin/filemanager/browse/ aka the filemanager does not prevent a change of a file extension to ".php" after originally using the parameter "filename" for uploading a JPEG image. Exploitation requires a...

CVE-2015-6567

Wolf CMS before 0.8.3.1 allows unrestricted file upload and PHP Code Execution because admin/plugin/filemanager/browse/ aka the filemanager does not validate the parameter "filename" properly. Exploitation requires a registered user who has access to upload functionality...

CVE-2015-6567

CVE-2015-6567 affects Wolf CMS prior to 0.8.3.1. The vulnerability arises in admin/plugin/file_manager/browse (the file manager) where the filename parameter is not properly validated, enabling an authenticated user with upload rights to upload arbitrary files and potentially execute PHP code on ...

CVE-2015-6568

Wolf CMS before 0.8.3.1 is vulnerable to an unrestricted file upload that allows changing a file’s extension to .php via admin/plugin/file_manager/browse/, enabling PHP code execution. Exploitation requires a registered user with upload access. The issue is addressed in Wolf CMS 0.8.3.1 (release ...

CVE-2015-6567

Wolf CMS before 0.8.3.1 allows unrestricted file upload and PHP Code Execution because admin/plugin/filemanager/browse/ aka the filemanager does not validate the parameter "filename" properly. Exploitation requires a registered user who has access to upload functionality...

CVE-2015-6567: Improper Input Validation

Wolf CMS before 0.8.3.1 allows unrestricted file upload and PHP Code Execution because admin/plugin/filemanager/browse/ aka the filemanager does not validate the parameter "filename" properly. Exploitation requires a registered user who has access to upload functionality...

CVE-2015-6568: Improper Input Validation

Wolf CMS before 0.8.3.1 allows unrestricted file rename and PHP Code Execution because admin/plugin/filemanager/browse/ aka the filemanager does not prevent a change of a file extension to ".php" after originally using the parameter "filename" for uploading a JPEG image. Exploitation requires a...

PT-2017-7035

Name of the Vulnerable Software and Affected Versions Wolf CMS versions prior to 0.8.3.1 Description The issue allows for unrestricted file upload and PHP code execution due to improper validation of the filename parameter in the file manager, accessible at the "admin/plugin/file manager/browse/"...

PT-2017-7036

Name of the Vulnerable Software and Affected Versions Wolf CMS versions prior to 0.8.3.1 Description The issue allows for unrestricted file rename and PHP code execution. This is because the file manager, located at the admin/plugin/file manager/browse/ endpoint, does not prevent a file extension...

Wolf CMS Stored Cross-Site Scripting Vulnerability

Wolf CMS is a PHP-based open source content management system CMS developed by the Wolf CMS team. The system provides user interface , templates , user management and rights management and other functions . A stored cross-site scripting vulnerability exists in Wolf CMS version 0.8, which stems fr...

Wolf CMS 0.8 Cross Site Scripting

Title Wolf CMS 0.8 - Stored Cross-Site Scripting XSS Vulnerability + Credit Mattia Reggiani [email protected] + Advisory https://github.com/mattiareggiani/Security-Advisories/blob/master/MR-16-03WolfCMS.pdf + Vendor Homepage https://www.wolfcms.org/ + Affected Version 0.8 + Tested on Ubuntu...

Wolf CMS Cross-Site Scripting Vulnerability (CNVD-2016-05085)

Wolf CMS is a PHP-based open source content management system CMS developed by the Wolf CMS team. A cross-site scripting vulnerability exists in Wolf CMS version 0.8.3.1, which can be exploited by attackers to execute arbitrary script code, steal cookie-based authentication and launch other attac...

Wolf CMS Metasploit module arbitrary file upload vulnerability (CNVD-2016-04300)

Wolf CMS is a content management system CMS.Metasploit is one of the security vulnerability detection tool components. An arbitrary file upload vulnerability exists in the Metasploit module of Wolf CMS version 0.8.2. An attacker can use this vulnerability to upload arbitrary files to the /public...

Wolf CMS Metasploit Module Arbitrary File Upload Vulnerability

Wolf CMS is a content management system CMS.Metasploit is one of the security vulnerability detection tool components. An arbitrary file upload vulnerability exists in the Metasploit module of Wolf CMS version 0.8.2. An attacker can use this vulnerability to upload arbitrary files to the /public...

Wolf CMS 0.8.2 Arbitrary PHP File Upload

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class MetasploitModule 'Wolfcms 0.8.2 Arbitrary PHP File Upload Vulnerability', 'Description' = %q This module exploits a file upload vulnerability in...

Wolf CMS 0.8.2 - Arbitrary File Upload (Metasploit)

Exploit for php platform in category remote exploits This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class MetasploitModule 'Wolfcms 0.8.2 Arbitrary PHP File Upload Vulnerability', 'Description' = %q...

Wolf CMS 0.8.2 - Arbitrary File Upload (Metasploit)

Wolf CMS 0.8.2 - Arbitrary File Upload Metasploit This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class MetasploitModule 'Wolfcms 0.8.2 Arbitrary PHP File Upload Vulnerability', 'Description' = %q Th...

Trivia Word for Teen Wolf Fans - Dynamic Code Loading, External URLs, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application Trivia Word for Teen Wolf Fans published at the 'play' market has multiple vulnerabilities...

Quiz for Teen Wolf fans - Native code usage, SD-card access, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Quiz for Teen Wolf fans published at the 'play' market has multiple vulnerabilities...

Wild Wolf Simulator 3D - Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Wild Wolf Simulator 3D published at the 'play' market has multiple vulnerabilities...