VYPR
← All advisories
Unrated severityNVD Advisory· Published Feb 19, 2015· Updated Jun 17, 2026

CVE-2015-1587

CVE-2015-1587

Description

Unrestricted file upload vulnerability in file_to_index.php in Maarch LetterBox 2.8 and earlier and GEC/GED 1.4 and earlier allows remote attackers to execute arbitrary PHP code by uploading a file with a PHP extension, then accessing it via a request to a predictable filename in tmp/.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • Maarch/Gec\/ged2 versions
    cpe:2.3:a:maarch:gec\/ged:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:maarch:gec\/ged:*:*:*:*:*:*:*:*range: <=1.4
    • (no CPE)range: <=1.4
  • Maarch/Letterbox2 versions
    cpe:2.3:a:maarch:letterbox:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:maarch:letterbox:*:*:*:*:*:*:*:*range: <=2.8
    • (no CPE)range: <=2.8

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.