CVE-2015-7309

概要

参考情報

• blog.curesec.com/article/blog/Bolt-224-Code-Execution-44.html · Exploit
• packetstormsecurity.com/files/133539/CMS-Bolt-2.2.4-File-Upload.html · Exploit
• seclists.org/fulldisclosure/2015/Aug/66 · Exploit
• rapid7.com/db/modules/exploit/multi/http/bolt_file_upload · Exploit
• bolt.cm/newsitem/bolt-2-2-5-released · Patch
• exploit-db.com/exploits/38196 · Exploit

bolt のその他の脆弱性

• CVE-2025-34086高 8.8Bolt CMS versions 3.7.0 and earlier contain a chain of vulnerabilities that together allow an authenticated user to achieve remote code exec…
• CVE-2024-7300中 5.4A vulnerability classified as problematic has been found in Bolt CMS 3.7.1. Affected is an unknown function of the file /bolt/editcontent/sh…
• CVE-2024-7299中 5.4** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in Bolt CMS 3.7.1. It has been rated as problematic. This issue affects some unkno…
• CVE-2022-31321緊急 9.1The foldername parameter in Bolt 5.1.7 was discovered to have incorrect input validation, allowing attackers to perform directory enumeratio…
• CVE-2021-27367高 7.5Controller/Backend/FileEditController.php and Controller/Backend/FilemanagerController.php in Bolt before 4.1.13 allow Directory Traversal.