CVE-2015-7773

Unrestricted file upload vulnerability in the Panel component in Bastian Allgeier Kirby before 2.1.2 allows remote authenticated users to execute arbitrary PHP code by uploading a file that lacks an extension, and then renaming this file to have a .php extension.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
6.5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:S/C:P/I:P/A:P
jpcertCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 62%
VendorProductVersion
bastian_allgeierkirby
𝑥
≤ 2.1.1
𝑥
= Vulnerable software versions
References
http://getkirby.com/changelog/kirby-2-1-2
http://jvn.jp/en/jp/JVN34780384/index.html
http://jvndb.jvn.jp/jvndb/JVNDB-2015-000182
http://getkirby.com/changelog/kirby-2-1-2
http://jvn.jp/en/jp/JVN34780384/index.html
http://jvndb.jvn.jp/jvndb/JVNDB-2015-000182