CVE Database /
CVE-2015-9228
CVE · High
CVE-2015-9228 — Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery [nextgen-gallery] < 2.1.15
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2015-9228
|
Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery [nextgen-gallery] < 2.1.15 |
Unrestricted Upload of File with Dangerous Type |
High
8.8
|
< 2.1.15
|
2.1.15 |
2015-12-23 |
—
|
CVE-2015-9228
The Photocrati NextGEN Gallery plugin before version 2.1.15 contained an unrestricted file upload vulnerability in its post-new.php file. An attacker could bypass file type restrictions by modifying a file's extension from .jpg to .php through the name parameter, allowing arbitrary file uploads. This flaw affected versions up to and including 2.1.10 and was resolved in version 2.1.15.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings