PoC Index

CVE-2015-1785

MEDIUM 6.5EPSS 0.7%

In nextgen-galery wordpress plugin before 2.0.77.3 there are two vulnerabilities which can allow an attacker to gain full access over the web application. The vulnerabilities lie in how the application validates user uploaded files and lack of security measures preventing unwanted HTTP requests.

CVSS v3.1
6.5 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
CVSS v2.0
4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N
EPSS
0.69% chance of exploitation in the next 30 days, 50th percentile
Published
2022-07-07
Updated
2024-08-06

Proof-of-concept exploits (1)

References

Related