CVE-2015-1785

 

Published at: - 07-07-2022 03:15

Last modified: - 14-07-2022 07:35

Total changes: - 2

Description

In nextgen-galery wordpress plugin before 2.0.77.3 there are two vulnerabilities which can allow an attacker to gain full access over the web application. The vulnerabilities lie in how the application validates user uploaded files and lack of security measures preventing unwanted HTTP requests.

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

 

Verification logic

 

Reference

• https://wpscan.com/vulnerability/c894727a-b779-4583-a860-13c2c27275d4
• https://blog.nettitude.com/uk/crsf-and-unsafe-arbitrary-file-upload-in-nextgen-gallery-plugin-for-wordpress

 

Keywords

NVD

 

CVE-2015-1785

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures