KENT-WEB Joyful Note before 5.3 allows remote attackers to delete files or write to files, and consequently execute arbitrary code, via vectors involving an article.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0889
Reference (s):
- http://www.kent-web.com/bbs/joyful.html
- JVN:JVN#88862608
- URL: http://jvn.jp/en/jp/JVN88862608/index.html
- JVNDB:JVNDB-2015-000024
- URL: http://jvndb.jvn.jp/jvndb/JVNDB-2015-000024