PT-2017-7556 · Photocrati · Photocrati Nextgen Gallery

Sathish · Publicado 2017-09-12 · Atualizado 2020-10-29 · CVE-2015-9228

Positive Technologies (AI Summary)

CVSS v2.0

9.0

Alta

Vetor base

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Photocrati NextGEN Gallery plugin version 2.1.10

Description The issue concerns unrestricted file upload in the Photocrati NextGEN Gallery plugin for WordPress. This is achieved by modifying the file extension, for example, from .jpg to .php, using the name parameter in post-new.php.

Recommendations For version 2.1.10, consider restricting file uploads to only allowed extensions to prevent potential exploitation. As a temporary workaround, restrict access to the post-new.php file until a patch is available. Avoid using the name parameter in the affected endpoint until the issue is resolved.

Correção

Unrestricted File Upload

Enumeração de Fraquezas

CWE-434

Identificadores relacionados

CVE-2015-9228

Produtos afetados

Photocrati Nextgen Gallery

Referências · 8

• https://github.com/cybersecurityworks/Disclosed/issues/6 · Aviso do Fabricante
• http://openwall.com/lists/oss-security/2015/10/27/6 · Nota
• https://wordpress.org/plugins/nextgen-gallery/#developers · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2015-9228 · Nota de Segurança
• https://wpvulndb.com/vulnerabilities/9758 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-9228 · Nota
• https://cybersecurityworks.com/zerodays/cve-2015-9228-crony.html · Nota
• https://packetstormsecurity.com/files/135061/WordPress-NextGEN-Gallery-2.1.10-Shell-Upload.html · Nota