Unrated severityNVD Advisory· Published Feb 26, 2015· Updated May 6, 2026
CVE-2015-2087
CVE-2015-2087
Description
Unrestricted file upload vulnerability in the Avatar Uploader module before 6.x-1.3 for Drupal allows remote authenticated users to execute arbitrary PHP code by uploading a file with a PHP extension, then accessing it via unspecified vectors.
Affected products
1- cpe:2.3:a:avatar_uploader_project:avatar_uploader:*:*:*:*:*:drupal:*:*Range: <=6.x-1.2
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
3- www.drupal.org/node/2427069nvdPatch
- www.drupal.org/node/2428793nvdPatchVendor Advisory
- www.securityfocus.com/bid/72674nvd
News mentions
0No linked articles in our index yet.