CVE-2015-5501
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2015-5501
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
The Hostmaster (Aegir) module 6.x-2.x before 6.x-2.4 and 7.x-3.x before 7.x-3.0-beta2 for Drupal allows remote attackers to execute arbitrary PHP code via a crafted file in the directory used to write Apache vhost files for hosted sites in a multi-site environment.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Drupal Hostmaster模块远程代码执行漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Drupal是Drupal社区所维护的一套用PHP语言开发的免费、开源的内容管理系统。Hostmaster（又名Aegir）是其中的一个管理Drupal站点的模块。 Drupal Hostmaster模块6.x-2.4之前6.x-2.x版本和7.x-3.0-beta2之前7.x-3.x版本中存在安全漏洞，该漏洞源于程序没有限制写入用于托管网站的Apache vhost文件的代码的执行。远程攻击者可借助特制的文件利用该漏洞执行任意PHP命令。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2015-5501
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2015-5501
请登录查看更多情报信息。
- http://community.aegirproject.org/3.0-beta2x_refsource_CONFIRM
- https://www.drupal.org/node/2492317x_refsource_MISC
- http://community.aegirproject.org/2.4x_refsource_CONFIRM
- https://nvd.nist.gov/vuln/detail/CVE-2015-5501
Same Patch Batch · n/a · 2015-08-18 · 50 CVEs total
| CVE-2015-6518 | phpLiteAdmin 跨站脚本漏洞 | |
| CVE-2015-6508 | Electric Sheep Fencing pfsense 跨站脚本漏洞 | |
| CVE-2015-6512 | Joomla! FreiChat组件SQL注入漏洞 | |
| CVE-2015-6513 | Joomla! J2Store扩展SQL注入漏洞 | |
| CVE-2015-6514 | Splunk Enterprise和Splunk Light Dashboard 跨站脚本漏洞 | |
| CVE-2015-6515 | Splunk Enterprise和Splunk Light Web 跨站脚本漏洞 | |
| CVE-2015-6516 | sysPass‘getAccounts’参数SQL注入漏洞 | |
| CVE-2015-6511 | Electric Sheep Fencing pfsense 跨站脚本漏洞 | |
| CVE-2015-4029 | Electric Sheep Fencing Pfsense WebGUI 跨站脚本漏洞 | |
| CVE-2015-6519 | Arab Portal SQL注入漏洞 | |
| CVE-2015-5485 | WordPress Modern Tribe Eventbrite Tickets插件跨站脚本漏洞 | |
| CVE-2015-6517 | phpLiteAdmin 跨站请求伪造漏洞 | |
| CVE-2015-5515 | Drupal Views Bulk Operations模块访问绕过漏洞 | |
| CVE-2015-5514 | Drupal Migrate模块跨站脚本漏洞 | |
| CVE-2015-5513 | Drupal Shibboleth authentication模块跨站脚本漏洞 | |
| CVE-2015-5512 | Drupal me aliases模块权限许可和访问控制漏洞 | |
| CVE-2015-5511 | Drupal HybridAuth Social Login模块权限许可和访问控制漏洞 | |
| CVE-2015-5510 | Drupal Content Construction Kit模块输入验证漏洞 | |
| CVE-2015-5509 | Drupal Administration Views模块权限许可和访问控制漏洞 | |
| CVE-2015-5508 | eXtensible Catalog (XC) Drupal Toolkit XC NCIP Provider模块跨站请求伪造漏洞 |
Showing top 20 of 50 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same vendor: n/a
- CVE-2026-8276
bettercap MySQL Server mysql_server.go integer coercion - CVE-2026-8275
bettercap zerogod IPP Service zerogod_ipp_primitives.go ippR - CVE-2026-8270
Open5GS SMF ogs_nas_parse_qos_rules denial of service - CVE-2026-8269
Open5GS SMF smf_nsmf_handle_create_sm_context denial of serv - CVE-2026-8268
Open5GS SMF OpenAPI_list_create denial of service
V. Comments for CVE-2015-5501
No comments yet