CVE-2015-7570

HIGH 7.2CVE-2015-7570 · Published 24/04/2017 · updated 17/06/2026

In short

CVE-2015-7570 is a HIGH (CVSS 7.2) vulnerability affecting yeager cms (yeager).
Chance of exploitation in the next 30 days (EPSS): 6.0%, higher than 93.4% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
yeager cms yeager	`= 1.2.1`	No fix yet

Description

Multiple server-side request forgery (SSRF) vulnerabilities in Yeager CMS 1.2.1 allow remote attackers to trigger outbound requests and enumerate open ports via the dbhost parameter to libs/org/adodb_lite/tests/test_adodb_lite.php, libs/org/adodb_lite/tests/test_datadictionary.php, or libs/org/adodb_lite/tests/test_adodb_lite_sessions.php.

References

packetstormsecurity.com/files/135716/Yeager-CMS-1.2.1-File-Upload-SQL-Injection-XSS-SSRF.html · Exploit
seclists.org/fulldisclosure/2016/Feb/44 · Mailing List
securityfocus.com/archive/1/537493/100/0/threaded
exploit-db.com/exploits/39436 · Exploit

More vulnerabilities in yeager cms

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

yeager cms

yeager

= 1.2.1

No fix yet

Description

More vulnerabilities in yeager cms

See all →