Lucene search
MitreCVELIST:CVE-2015-9228HistorySep 12, 2017 - 8:00 a.m.
CVE-2015-9228
2017-09-1208:00:00
mitre
www.cve.org
3
In post-new.php in the Photocrati NextGEN Gallery plugin 2.1.10 for WordPress, unrestricted file upload is available via the name parameter, if a file extension is changed from .jpg to .php.
References
www.openwall.com/lists/oss-security/2015/10/27/6
cybersecurityworks.com/zerodays/cve-2015-9228-crony.html
github.com/cybersecurityworks/Disclosed/issues/6
packetstormsecurity.com/files/135061/WordPress-NextGEN-Gallery-2.1.10-Shell-Upload.html
wordpress.org/plugins/nextgen-gallery/#developers
wpvulndb.com/vulnerabilities/9758
Related
openvas
openvas
prion
prion
Unrestricted file upload
2017-09-12 08:29:00
wpvulndb
wpvulndb
NextGEN Gallery < 2.1.15 - Unrestricted File Upload
2015-12-23 00:00:00
cve
cve
CVE-2015-9228
2017-09-12 08:29:00
nvd
nvd
CVE-2015-9228
2017-09-12 08:29:00