CVE-2015-7570: Yeager CMS

High severity, CVSS 7.2. EPSS: 6% chance of exploitation in the next 30 days.

Multiple server-side request forgery (SSRF) vulnerabilities in Yeager CMS 1.2.1 allow remote attackers to trigger outbound requests and enumerate open ports via the dbhost parameter to libs/org/adodb_lite/tests/test_adodb_lite.php, libs/org/adodb_lite/tests/test_datadictionary.php, or libs/org/adodb_lite/tests/test_adodb_lite_sessions.php.

Affected products

• Yeager Yeager CMS: version 1.2.1 only

Published 2017-04-24. Last modified 2026-06-17.