← Back

CVE-2015-5501

nvd nist
Published: Aug 18, 2015Modified: May 6, 2026

JSON object

Loading...
7.5
Vector
AV:N/AC:L/Au:N/C:P/I:P/A:P
Exploitability: 10.0 / Impact: 6.4
Source: NVD

Description

The Hostmaster (Aegir) module 6.x-2.x before 6.x-2.4 and 7.x-3.x before 7.x-3.0-beta2 for Drupal allows remote attackers to execute arbitrary PHP code via a crafted file in the directory used to write Apache vhost files for hosted sites in a multi-site environment.

Affected (5)

Aegirproject
1 product
Hostmaster
Configuration A
5 vulnerable
Vulnerable SoftwareAffected Versions
Aegirproject
Hostmaster
Version 6.x-2.0
Hostmaster
Version 6.x-2.1
Hostmaster
Version 6.x-2.2
Hostmaster
Version 6.x-2.3
Hostmaster
Version 6.x-3.0 beta1

Related CWEs

CWE-254
CWE-254

References (10)

Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.