Skip to content
OpenAdvisories
Unscored Public exploit CVE-2015-1578 EUVD-2015-1710GHSA-gjv8-8j8x-fjm8

Multiple open redirect vulnerabilities in u5CMS before 3.9.4 allow remote attackers to redirect users to arbitrary web sites and conduct ph…

Published Feb 11, 2015 · Updated Sep 16, 2024 · Assigned by mitre

Description

Multiple open redirect vulnerabilities in u5CMS before 3.9.4 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the (1) pidvesa cookie to u5admin/pidvesa.php or (2) uri parameter to u5admin/meta2.php.

Public exploits

Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.

Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.

Exploit-DB 1

GitHub 3 repositories

  • yaldobaoth/CVE-2015-1578-PoC-Metasploit ★ 0 · Jun 20, 2025

    This is a proof-of-concept Metasploit module exploit for CVE-2015-1578, a buffer overflow vulnerability in Achat 0.150 beta7 on Windows. Exploitation leads to remote code execution via a crafted UDP …

  • yaldobaoth/CVE-2015-1578-PoC ★ 0 · Jun 19, 2025

    This is a proof-of-concept exploit for CVE-2015-1578, a buffer overflow vulnerability in Achat 0.150 beta7 on Windows. Exploitation leads to remote code execution via a crafted UDP packet.

  • Zeppperoni/CVE-2015-1578 ★ 0 · Jul 7, 2023

    Achat 0.150 beta7 - Remote Buffer Overflow Rewrite for python3 for the PNPT course.

Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.

References