Sploitus

CVE-2018-15961

15 known exploits for CVE-2018-15961

Adobe ColdFusion versions July 12 release (2018.0.0.310739), Update 6 and earlier, and Update 14 and earlier have an unrestricted file upload vulnerability. Successful exploitation could lead to arbitrary code execution.

Affected products
Coldfusion
Adobe Coldfusion
= 11.0, 2016, 2018
Fix
Available
CVSS 2.0
10.0 HIGH
CVSS 3.1
9.8 CRITICAL
EPSS
100.0% (100th percentile)
Weakness
CWE-434
NVD status
Analyzed
Published
2018-09-25
CVE-2018-15961 at NVD
Authoritative description, scoring and affected products

15 known exploits for CVE-2018-15961

Proof-of-concept code and exploit modules indexed by Sploitus

cve-2018-15961
2026-09-04 KitPloitKITPLOIT
CVE-2018-15961
2026-09-03 KitPloitKITPLOIT
CVE-2018-15961
2026-09-02 KitPloitKITPLOIT
CVE-2018-15961
2026-09-01 KitPloitKITPLOIT
CVE-2018-15961
2026-08-31 KitPloitKITPLOIT
Exploit for Unrestricted Upload of File with Dangerous Type in Adobe Coldfusion
2021-10-03 orangmudaGITHUB
Exploit for Unrestricted Upload of File with Dangerous Type in Adobe Coldfusion
2021-06-30 xbufuGITHUB
Adobe Coldfusion 11 CKEditor Arbitrary File Upload Exploit
2019-01-10 metasploitZDTRuby
Adobe Coldfusion 11 CKEditor Arbitrary File Upload
2019-01-10 Vahagn VardanianPACKETSTORMRuby
Adobe ColdFusion File Upload
2018-12-13 Dsquare SecurityD2
Adobe ColdFusion 2018 - Arbitrary File Upload Vulnerability
2018-12-12 Vahagn VardanyanZDT
Adobe ColdFusion 2018 Shell Upload
2018-12-12 Pete FreitagPACKETSTORM
Adobe ColdFusion 2018 - Arbitrary File Upload
2018-12-11 Vahagn VardanyanEXPLOITPACK
Adobe ColdFusion 2018 - Arbitrary File Upload
2018-12-11 Vahagn VardanyanEXPLOITDB
Adobe ColdFusion CKEditor unrestricted file upload
2018-09-11 Pete Freitag de Foundeo, Vahagn vah_13 Vardanian, QazeerMETASPLOITRuby