CVE-2015-9228

Published Sep 12, 2017 CVSS 3.0 · 8.8 High EPSS 3.7% KEV · Not listed
Description
In post-new.php in the Photocrati NextGEN Gallery plugin 2.1.10 for WordPress, unrestricted file upload is available via the name parameter, if a file extension is changed from .jpg to .php.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2015-9081 In post-new.php in the Photocrati NextGEN Gallery plugin 2.1.10 for WordPress, unrestricted file upload is available via the name parameter, if a file extension is changed from .jpg to .php.
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 6, 2024, 8:43 AM
Reserved
Sep 12, 2017, 12:00 AM
Status
Modified
Published
Sep 12, 2017, 8:29 AM
Modified
Jun 17, 2026, 12:36 AM