CVE-2015-9228

In post-new.php in the Photocrati NextGEN Gallery plugin 2.1.10 for WordPress, unrestricted file upload is available via the name parameter, if a file…

published September 12, 2017

CVSS
—
EPSS
4%
Percentile
89.8
In the wild
Unconfirmed
What it is

In post-new.php in the Photocrati NextGEN Gallery plugin 2.1.10 for WordPress, unrestricted file upload is available via the name parameter, if a file extension is changed from .jpg to .php.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03729 · 89.8th percentile
Published
2017-09-12T08:00Z
EPSS history
Timeline
  • 12 SEP 08:00Z
    In post-new.php in the Photocrati NextGEN Gallery plugin 2.1.10 for WordPress, unrestricted file upload is available via the name parameter, if a file…
    cvelistv5