Lucene search
HistoryOct 03, 2022 - 4:15 p.m.
CVE-2015-6967
cve
2015
6967
vulnerability
file upload
nibbleblog
remote code execution
security
7.9 High
AI Score
Confidence
Low
6.5 Medium
CVSS2
Access Vector
Access Complexity
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
0.228 Low
EPSS
Percentile
96.5%
Unrestricted file upload vulnerability in the My Image plugin in Nibbleblog before 4.0.5 allows remote administrators to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in content/private/plugins/my_image/image.php.
Affected configurations
Node
nibbleblognibbleblogRange≤4.0.4
| CPE | Name | Operator | Version |
|---|---|---|---|
| nibbleblog:nibbleblog | nibbleblog | le | 4.0.4 |
References
Social References
More
Related
prion
prion
Unrestricted file upload
2015-09-16 14:59:00
cvelist
cvelist
CVE-2015-6967
2022-10-03 16:15:53
nvd
nvd
CVE-2015-6967
2015-09-16 14:59:09
7.9 High
AI Score
Confidence
Low
6.5 Medium
CVSS2
Access Vector
Access Complexity
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
0.228 Low
EPSS
Percentile
96.5%
Related for CVE-2015-6967