CVE-2015-7570

Name of the Vulnerable Software and Affected Versions Yeager CMS version 1.2.1

Description The issue allows remote attackers to trigger outbound requests and enumerate open ports. This is achieved via the dbhost parameter to specific API endpoints, including 'libs/org/adodb lite/tests/test adodb lite.php', 'libs/org/adodb lite/tests/test datadictionary.php', or 'libs/org/adodb lite/tests/test adodb lite sessions.php'.

Recommendations For Yeager CMS version 1.2.1, as a temporary workaround, consider restricting access to the dbhost parameter in the affected API endpoints until a patch is available. Avoid using the dbhost parameter in the specified endpoints to minimize the risk of exploitation.