CVE-2015-7570

HighCVSS 7.2/10Last modified Jun 17, 2026

Description

Multiple server-side request forgery (SSRF) vulnerabilities in Yeager CMS 1.2.1 allow remote attackers to trigger outbound requests and enumerate open ports via the dbhost parameter to libs/org/adodb_lite/tests/test_adodb_lite.php, libs/org/adodb_lite/tests/test_datadictionary.php, or libs/org/adodb_lite/tests/test_adodb_lite_sessions.php.

Metrics

CVSS 3.0 7.2/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-918

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://packetstormsecurity.com/files/135716/Yeager-CMS-1.2.1-File-Upload-SQL-Injection-XSS-SSRF.htmlExploit, Patch, Third Party Advisory
http://seclists.org/fulldisclosure/2016/Feb/44Mailing List, Patch, Third Party Advisory
http://www.securityfocus.com/archive/1/537493/100/0/threaded
https://www.exploit-db.com/exploits/39436/Exploit, Patch, Third Party Advisory, VDB Entry
http://packetstormsecurity.com/files/135716/Yeager-CMS-1.2.1-File-Upload-SQL-Injection-XSS-SSRF.htmlExploit, Patch, Third Party Advisory
http://seclists.org/fulldisclosure/2016/Feb/44Mailing List, Patch, Third Party Advisory
http://www.securityfocus.com/archive/1/537493/100/0/threaded
https://www.exploit-db.com/exploits/39436/Exploit, Patch, Third Party Advisory, VDB Entry

Timeline

Published: Apr 24, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2015

CVE-2015-75717.8Unrestricted file upload vulnerability in Yeager CMS 1.2.1 allows remote attackers to execute arbitrary code by uploading a file with an exe CVE-2015-75755.9Mozilla Network Security Services (NSS) before 3.20.2, as used in Mozilla Firefox before 43.0.2 and Firefox ESR 38.x before 38.5.2, does not CVE-2015-75763.7The http_basic_authenticate_with method in actionpack/lib/action_controller/metal/http_authentication.rb in the Basic Authentication impleme CVE-2015-75775.3activerecord/lib/active_record/nested_attributes.rb in Active Record in Ruby on Rails 3.1.x and 3.2.x before 3.2.22.1, 4.0.x and 4.1.x befor CVE-2015-75786.1Cross-site scripting (XSS) vulnerability in the rails-html-sanitizer gem before 1.0.3 for Ruby on Rails 4.2.x and 5.x allows remote attacker CVE-2015-75796.1Cross-site scripting (XSS) vulnerability in the rails-html-sanitizer gem 1.0.2 for Ruby on Rails 4.2.x and 5.x allows remote attackers to in CVE-2015-75806.1Cross-site scripting (XSS) vulnerability in lib/rails/html/scrubbers.rb in the rails-html-sanitizer gem before 1.0.3 for Ruby on Rails 4.2.x CVE-2015-75817.5actionpack/lib/action_dispatch/routing/route_set.rb in Action Pack in Ruby on Rails 4.x before 4.2.5.1 and 5.x before 5.0.0.beta1.1 allows r CVE-2015-75967.8SafeNet Authentication Service End User Software Tools for Windows uses a weak ACL for unspecified installation directories and executable m CVE-2015-75977.8SafeNet Authentication Service IIS Agent uses a weak ACL for unspecified installation directories and executable modules, which allows local CVE-2015-75987.8SafeNet Authentication Service TokenValidator Proxy Agent uses a weak ACL for unspecified installation directories and executable modules, w CVE-2015-75998.1Integer overflow in the _authenticate function in svc_auth.c in Wind River VxWorks 5.5 through 6.9.4.1, when the Remote Procedure Call (RPC)