VULNERABILITY INTELLIGENCE

CVE-2015-1059

CVSS score6.5 MEDIUM
EPSS probability5.43%
CISA KEVNot currently listed
Published2015-01-16
Last modified2026-06-17
CVSS vectorAV:N/AC:L/Au:S/C:P/I:P/A:P

Description

Unrestricted file upload vulnerability in admin/files/add in AdaptCMS 3.0.3 allows remote authenticated users to execute arbitrary PHP code by uploading a file with a PHP extension, then accessing it via a direct request to the file in /app/webroot/uploads.

Weakness classification

  • CWE-94: Improper Control of Generation of Code ('Code Injection')

Primary references