Lucene search
PRIOn knowledge basePRION:CVE-2015-9228HistorySep 12, 2017 - 8:29 a.m.
Unrestricted file upload
2017-09-1208:29:00
PRIOn knowledge base
www.prio-n.com
2
In post-new.php in the Photocrati NextGEN Gallery plugin 2.1.10 for WordPress, unrestricted file upload is available via the name parameter, if a file extension is changed from .jpg to .php.
References
www.openwall.com/lists/oss-security/2015/10/27/6
cybersecurityworks.com/zerodays/cve-2015-9228-crony.html
github.com/cybersecurityworks/Disclosed/issues/6
packetstormsecurity.com/files/135061/WordPress-NextGEN-Gallery-2.1.10-Shell-Upload.html
wordpress.org/plugins/nextgen-gallery/
wpvulndb.com/vulnerabilities/9758
Related
openvas
openvas
cvelist
cvelist
CVE-2015-9228
2017-09-12 08:00:00
wpvulndb
wpvulndb
NextGEN Gallery < 2.1.15 - Unrestricted File Upload
2015-12-23 00:00:00
nvd
nvd
CVE-2015-9228
2017-09-12 08:29:00
cve
cve
CVE-2015-9228
2017-09-12 08:29:00