9

CVE-2015-9228

NextGen Gallery <= 2.1.10 - Unrestricted File Upload

In post-new.php in the Photocrati NextGEN Gallery plugin 2.1.10 for WordPress, unrestricted file upload is available via the name parameter, if a file extension is changed from .jpg to .php.
Mögliche Gegenmaßnahme
Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery: Update to version 2.1.15, or a newer patched version
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Imagely ≫ Nextgen Gallery Version 1.5.0 SwPlatform wordpress
Imagely ≫ Nextgen Gallery Version 1.5.1 SwPlatform wordpress
Imagely ≫ Nextgen Gallery Version 1.5.2 SwPlatform wordpress
Imagely ≫ Nextgen Gallery Version 1.5.3 SwPlatform wordpress
Imagely ≫ Nextgen Gallery Version 1.5.4 SwPlatform wordpress
Imagely ≫ Nextgen Gallery Version 1.5.5 SwPlatform wordpress
Imagely ≫ Nextgen Gallery Version 1.6.0 SwPlatform wordpress
Imagely ≫ Nextgen Gallery Version 1.6.1 SwPlatform wordpress
Imagely ≫ Nextgen Gallery Version 1.6.2 SwPlatform wordpress
Imagely ≫ Nextgen Gallery Version 1.7.0 SwPlatform wordpress
Imagely ≫ Nextgen Gallery Version 1.7.1 SwPlatform wordpress
Imagely ≫ Nextgen Gallery Version 1.7.2 SwPlatform wordpress
Imagely ≫ Nextgen Gallery Version 1.7.3 SwPlatform wordpress
Imagely ≫ Nextgen Gallery Version 1.7.4 SwPlatform wordpress
Imagely ≫ Nextgen Gallery Version 1.8.0 SwPlatform wordpress
Imagely ≫ Nextgen Gallery Version 1.8.1 SwPlatform wordpress
Imagely ≫ Nextgen Gallery Version 1.8.2 SwPlatform wordpress
Imagely ≫ Nextgen Gallery Version 1.8.3 SwPlatform wordpress
Imagely ≫ Nextgen Gallery Version 1.8.4 SwPlatform wordpress
Imagely ≫ Nextgen Gallery Version 1.9.0 SwPlatform wordpress
Imagely ≫ Nextgen Gallery Version 1.9.1 SwPlatform wordpress
Imagely ≫ Nextgen Gallery Version 1.9.2 SwPlatform wordpress
Imagely ≫ Nextgen Gallery Version 1.9.3 SwPlatform wordpress
Imagely ≫ Nextgen Gallery Version 1.9.5 SwPlatform wordpress
Imagely ≫ Nextgen Gallery Version 1.9.6 SwPlatform wordpress
Imagely ≫ Nextgen Gallery Version 1.9.7 SwPlatform wordpress
Imagely ≫ Nextgen Gallery Version 1.9.8 SwPlatform wordpress
Imagely ≫ Nextgen Gallery Version 1.9.10 SwPlatform wordpress
Imagely ≫ Nextgen Gallery Version 1.9.11 SwPlatform wordpress
Imagely ≫ Nextgen Gallery Version 1.9.12 SwPlatform wordpress
Imagely ≫ Nextgen Gallery Version 1.9.13 SwPlatform wordpress
Imagely ≫ Nextgen Gallery Version 2.0 SwPlatform wordpress
Imagely ≫ Nextgen Gallery Version 2.0.7 SwPlatform wordpress
Imagely ≫ Nextgen Gallery Version 2.0.11 SwPlatform wordpress
Imagely ≫ Nextgen Gallery Version 2.0.14 SwPlatform wordpress
Imagely ≫ Nextgen Gallery Version 2.0.17 SwPlatform wordpress
Imagely ≫ Nextgen Gallery Version 2.0.21 SwPlatform wordpress
Imagely ≫ Nextgen Gallery Version 2.0.23 SwPlatform wordpress
Imagely ≫ Nextgen Gallery Version 2.0.25 SwPlatform wordpress
Imagely ≫ Nextgen Gallery Version 2.0.27 SwPlatform wordpress
Imagely ≫ Nextgen Gallery Version 2.0.30 SwPlatform wordpress
Imagely ≫ Nextgen Gallery Version 2.0.31 SwPlatform wordpress
Imagely ≫ Nextgen Gallery Version 2.0.33 SwPlatform wordpress
Imagely ≫ Nextgen Gallery Version 2.0.40 SwPlatform wordpress
Imagely ≫ Nextgen Gallery Version 2.0.57 SwPlatform wordpress
Imagely ≫ Nextgen Gallery Version 2.0.58 SwPlatform wordpress
Imagely ≫ Nextgen Gallery Version 2.0.59 SwPlatform wordpress
Imagely ≫ Nextgen Gallery Version 2.0.61 SwPlatform wordpress
Imagely ≫ Nextgen Gallery Version 2.0.63 SwPlatform wordpress
Imagely ≫ Nextgen Gallery Version 2.0.65 SwPlatform wordpress
Imagely ≫ Nextgen Gallery Version 2.0.66 SwPlatform wordpress
Imagely ≫ Nextgen Gallery Version 2.0.66.16 SwPlatform wordpress
Imagely ≫ Nextgen Gallery Version 2.0.66.17 SwPlatform wordpress
Imagely ≫ Nextgen Gallery Version 2.0.66.26 SwPlatform wordpress
Imagely ≫ Nextgen Gallery Version 2.0.66.27 SwPlatform wordpress
Imagely ≫ Nextgen Gallery Version 2.0.66.29 SwPlatform wordpress
Imagely ≫ Nextgen Gallery Version 2.0.66.31 SwPlatform wordpress
Imagely ≫ Nextgen Gallery Version 2.0.66.33 SwPlatform wordpress
Imagely ≫ Nextgen Gallery Version 2.0.71 SwPlatform wordpress
Imagely ≫ Nextgen Gallery Version 2.0.74 SwPlatform wordpress
Imagely ≫ Nextgen Gallery Version 2.0.76 SwPlatform wordpress
Imagely ≫ Nextgen Gallery Version 2.0.77 SwPlatform wordpress
Imagely ≫ Nextgen Gallery Version 2.0.78 SwPlatform wordpress
Imagely ≫ Nextgen Gallery Version 2.0.78.1 SwPlatform wordpress
Imagely ≫ Nextgen Gallery Version 2.0.79 SwPlatform wordpress
Imagely ≫ Nextgen Gallery Version 2.1.0 SwPlatform wordpress
Imagely ≫ Nextgen Gallery Version 2.1.2 SwPlatform wordpress
Imagely ≫ Nextgen Gallery Version 2.1.7 SwPlatform wordpress
Imagely ≫ Nextgen Gallery Version 2.1.9 SwPlatform wordpress
Imagely ≫ Nextgen Gallery Version 2.1.10 SwPlatform wordpress
Weitere Schwachstelleninformationen
SystemWordPress Plugin
≫
Produkt Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery
Version *-2.1.10
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 3.73% 0.884
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 8.8 2.8 5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NIST 9 8 10
AV:N/AC:L/Au:S/C:C/I:C/A:C
CWE-434 Unrestricted Upload of File with Dangerous Type

The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.

http://www.openwall.com/lists/oss-security/2015/10/27/6
Third Party Advisory
Mailing List
https://cybersecurityworks.com/zerodays/cve-2015-9228-crony.html
https://github.com/cybersecurityworks/Disclosed/issues/6
Vendor Advisory
https://packetstormsecurity.com/files/135061/WordPress-NextGEN-Gallery-2.1.10-Shell-Upload.html
Third Party Advisory
VDB Entry
https://wordpress.org/plugins/nextgen-gallery/#developers
Vendor Advisory
https://wpvulndb.com/vulnerabilities/9758
https://www.wordfence.com/threat-intel/vulnerabilities/id/9622c839-a1dd-4633-8a9c-cec41d1041ff
Third Party Advisory