CVE-2015-1059: Insanevisions Adaptcms

Medium severity, CVSS 6.5. EPSS: 5.4% chance of exploitation in the next 30 days.

Unrestricted file upload vulnerability in admin/files/add in AdaptCMS 3.0.3 allows remote authenticated users to execute arbitrary PHP code by uploading a file with a PHP extension, then accessing it via a direct request to the file in /app/webroot/uploads.

Affected products

• Insanevisions Adaptcms: version 3.0.3 only

Published 2015-01-16. Last modified 2026-06-17.