CVE-2015-7309

The theme editor in Bolt before 2.2.5 does not check the file extension when renaming files, which allows remote authenticated users to execute arbitrary code by renaming a crafted file and then directly accessing it.

• CWE-74

• http://blog.curesec.com/article/blog/Bolt-224-Code-Execution-44.htmlExploit
• http://packetstormsecurity.com/files/133539/CMS-Bolt-2.2.4-File-Upload.htmlExploit
• http://seclists.org/fulldisclosure/2015/Aug/66Exploit
• http://www.rapid7.com/db/modules/exploit/multi/http/bolt_file_uploadExploit
• https://bolt.cm/newsitem/bolt-2-2-5-releasedPatch, Vendor Advisory
• https://www.exploit-db.com/exploits/38196/Exploit
• http://blog.curesec.com/article/blog/Bolt-224-Code-Execution-44.htmlExploit
• http://packetstormsecurity.com/files/133539/CMS-Bolt-2.2.4-File-Upload.htmlExploit
• http://seclists.org/fulldisclosure/2015/Aug/66Exploit
• http://www.rapid7.com/db/modules/exploit/multi/http/bolt_file_uploadExploit
• https://bolt.cm/newsitem/bolt-2-2-5-releasedPatch, Vendor Advisory
• https://www.exploit-db.com/exploits/38196/Exploit

Published

Sep 22, 2015

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-7299SQL injection vulnerability in Runtime/Runtime/AjaxCall.ashx…
• CVE-2015-7303Use-after-free vulnerability in the Update Manager service i…
• CVE-2015-7304Cross-site scripting (XSS) vulnerability in the amoCRM modul…
• CVE-2015-7305The Scald module 7.x-1.x before 7.x-1.5 for Drupal does not …
• CVE-2015-7306The CMS Updater module 7.x-1.x before 7.x-1.3 for Drupal doe…
• CVE-2015-7307Cross-site scripting (XSS) vulnerability in the CMS Updater …
• CVE-2015-7310McAfee Enterprise Security Manager (ESM), Enterprise Securit…
• CVE-2015-7311libxl in Xen 4.1.x through 4.6.x does not properly handle th…
• CVE-2015-7312Multiple race conditions in the Advanced Union Filesystem (a…
• CVE-2015-7313LibTIFF before 4.0.7 allows remote attackers to cause a deni…5.5
• CVE-2015-7314The Precious module in gollum before 4.0.1 allows remote att…
• CVE-2015-7315Plone 3.3.0 through 3.3.6, 4.0.0 through 4.0.10, 4.1.0 throu…