Back to the CVE list
CVE-2018-15961 CISA KEV · Actively exploited

Adobe ColdFusion Unrestricted File Upload Vulnerability

CVSS score

—

EPSS probability

%100.0

Risk score

—

Published

5 y ago

Public Exploits · GitHub and Metasploit Intelligence

This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.

Unrestricted file upload in Adobe ColdFusion (★9)

Public PoCSource updated: 11.11.2021 17:27:48

Adobe ColdFusion versions July 12 release (2018.0.0.310739), Update 6 and earlier, and Update 14 and earlier have an unrestricted file upload vulnerability. Successful exploitation could lead to arbitrary code execution. (★2)

Public PoCSource updated: 05.10.2022 07:59:55

CVE-2018-15961 — ᴀᴅᴏʙᴇ ᴄᴏʟᴅғᴜsɪᴏɴ (ʀᴄᴇ) (★2)

Public PoCSource updated: 01.11.2021 18:00:52

cve-2018-15961 (★1)

Public PoCSource updated: 29.08.2021 18:20:35

Exploit for CVE-2018-15961, a unrestricted file upload vulnerability in Adobe ColdFusion 2018 leading to RCE (★1)

Public PoCSource updated: 15.03.2022 20:57:09

Adobe ColdFusion 2018 - Arbitrary File Upload

Exploit referenceSource updated: 11.12.2018 00:00:00

Nuclei: Adobe ColdFusion - Unrestricted File Upload Remote Code Execution

Exploit reference

Similar Vulnerabilities

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2018-15961"